Training, Professional Services or Do I Try it Myself?

“If you don’t have time to do it right, when will you have time to do it over?”

-John Wooden

Training, professional service or do it yourself (DYI)? This is becoming a very common question for most of my clients and I would guess for the industry as a whole. While I am speaking specifically of virtualization (hypervisor), this of course could apply to many aspects of the current data center. So what is an IT team supposed to do? When does a system administrator admit he/she cannot complete task at head and in a way stick his own neck out? Where does budgets come into place vs. deliverables such as timelines, service levels etc? All very interesting questions, but answers are a bit complex.

 Training

Personally I am proponent of education in all aspect of like not just the technical side. However, training has some serious drawbacks and may not be a true option when looked at carefully. For one it is much more time consuming than most people realize or maybe want to admit. Plus ones absorption rate varies widely between individuals. I know people who touch something once and are “experts” while on the other hand people who have done the same thing a hundred times still needs reminders how to finish the task. Not to mention that the individual trainer/provider makes a huge difference. Lastly, classes usually require time away from the office and can put a person in a worst situation than before trying to catch up and learn new stuff at the same time.

With that said, there is a huge upside here. This learn to fish mentality provides higher adoption rate, customer satisfaction and allows the customer be less dependent on a particular partner or vendor. All in my opinion can be a huge value add for getting some classroom & lab time.

 Professional Services

Of course I want to be careful here since I work for a professional service (PS) company. The drawbacks are nothing new. It tends to be expensive and add up to 30% to projects budget. Managing the PS partner at times can be difficult and a time waste almost breaking even with doing it yourself. Plus, and it is a big plus, it puts the requestor in a vulnerable position with both his management and the PS partner. One, he/she s vouching for this service and in a way sticking their respected necks out while at the same time admitting they don’t have the capacity to do this themselves. The PS partner thinks they are dependent on them and lets be honest most of the time they are, and tend to use that to their advantage whether they do good work or not.

The good news if that you find a good partner most of these problems solve themselves. Value partners will not only do the work but train you as they move through the process meeting SLA’s and budgets. They will do their work in a timely manner putting your project ahead of schedule and make you the advocate look like a rock star. They are fair on price and try to work within your budget range and adapt as needed. Finally, someone else is on the hook and can, good or bad, be a scapegoat if the project ever goes sideways. Food for thought.

Do It Yourself

My favorite because it tends to be my motto but tends to get me in trouble more often than not. For one if you are lacking the base foundation of skillsets you could end up costing yourself a lot more time and money than expected.  With that I mean, It tends not to be a good use of company resources and your time could be better used doing the tasks you’re a good at.  And then the biggest negative, and I see this every working day of my career, is that it isn’t done right and causes huge headaches in the short or long term. Poor performance almost always boils down to bad infrastructure designs that a quality PS partner would have avoided in the beginning.

However there are some upside to the DIY approach. For instance people tend to learn best by doing and it pushes you to expand your knowledge. The cost aspect if avoiding the above mistakes can be huge and set up a dependence that is unmatched. You own the keys to your data center and no one is driving but you! This is a huge advantage when negotiating with vendors, partners, and even management. Lastly, It provides you the best job security I could imagine. As the designer and implementer you become almost irreplaceable as no one wants to reverse engineer your solutions.  Now granted this is only the case if it is done right and you don’t cause a huge outage.

Final Thoughts

In the end I tell clients a mixture of all of these tends to be the best fit. Of course depending on the scope and product I do recommend certain avenues. If it is tier 1 and 99.999 uptime application then by all means spending a few dollars here and there would be a great investment to ensure success. If it is a low priority project that needs little success and are not under a time crunch then it is great to roll up your sleeves and get to work. The one thing I will say is that education and classes should be included with every project. If you are not learning how things work you will always be susceptible to be vendor locked, and no one wants that except the vendors.

vCloud Director 1.5 New Features Overview

Part of the big announcements prior to VMworld this year was the announcement of vCloud Director 1.5. If you haven’t heard of vCloud director it was popularly known in the past as VMware Lab Manager (RIP).  With version 1 under its belt VMware is releasing version 1.5 and added a few new features. Below are a few of the most important (in my humble opinion) that will have the greatest impact for people already on vCloud Director.

First, and I am really excited about this, is the addition of Fast Provisioning. This feature uses linked clones so you can provision VMs from a template rather a full copy. This will allow for provisioning of a VM in seconds vs. who knows how long and will help cut your storage cost significantly. NetApp does something similar if you haven’t seen their product, I would check it out as well.

Fast Provisioning is great for the following:

  • Cloning production and pre-production workloads
  • Demo and trial environments
  • Test and Dev
  • Support Desk
  • And much much more

Second, they increased the enhancements of the vCloud API. This helps fit vCloud into existing environments with baked IT management tools. With added messaging it will be able to provide notifications to your various systems; backup, monitoring, CMDB, IPAM, and network tools for example. There is also some new SDK’s coming and better use of query service.

 

Third, they added a significant increase in support for their Microsoft SQL Database. You can actually build a vCloud Director environment using a Microsoft SQL database for all of the configuration data, which will help if you are highly invested in a Microsoft SQL database. Now you can get rid of that Oracle License you been hanging on to.

Lastly, I wanted to touch on the expansion of vShield support and will be integrating with IPSec VPN and added Firewall capabilities. More details to come on this, but know that when setting up secure cloud environments that there will be secure ways to connect external-internal cloud through a secure interface. Think DR and onsite cloud sites synching.

More to come, but excited to see this product line evolve.

Running Multiple Hypervisors Under vCenter: A Quick Look At Hotlink

Over the last couple weeks a very common question I am getting from customers is around switching off of VMware and onto another hypervisor. Usually when we go through the exercise to determine if this is something within their comfort zone we find quickly that the idea of rip and replace is much more of a burden than keeping the current infrastructure. But with that said, things are a changing and people are looking at a plan B so they are not married to a specific vendor incase of some sort of dramatic change, lets say pricing or feature set for example.

Until recently I could honestly say there wasn’t any alternatives that we would recommend that was apples to apples in features and scalability etc. Plus, even if a customer moved to a lateral competitor (Citrix or Hyper-v) they same “locked in” situation would occur. Now, only if there was a product that could manage all the different types of hyper-visors with the best of bread management software on a single platform?

Well we are all in luck because there is a new company that promises to help with this situation. Hotlink was founded last year and will be launching their new product, Hotlink SuperVISOR, very soon and I can say looking over their spec sheets that I am excited to see if this will be as advertised!

What Is it exactly:

In its simplest form it is a layer that sits in-between the hypervisor layer and your management console (vCenter for example).  Using their unique tools set including virtual object bus, transformation technology, proxy and integration services it allows for heterogeneous environment. This means, good or bad, you can run a multitude of different hypervisors under one single platform.

Benefits:

One thing that I do like about this technology is that it does take advantage of your best of breed products. For example, its first management plugin is designed for VMware vCenter and looking over the feature set this is a wise decision. Customer familiar with working in this management console will find the transition smooth with little to no disruption allowing them to leverage existing skills.

As well, you can now mix and match your hypervisors to match your application needs. This both increases efficiency and decreases cost as you put enterprise class programs on VMWare which is expensive and put tier 3 applications on Hyper-v which is less expensive. This puts you in a position to avoid vendor lock-in and if you are already running multiple hypervisors provide a single management console reducing your opex.

Unknowns:

I want to be careful when pointing out good vs. bad when reviewing this product because to be transparent I haven’t seen a demo copy or tested it in the lab as of yet. So instead I just have a lot of questions about the functionality, performance and other technical details.

For starters, I am not sure on the performance overhead of my host machines? I don’t know what this does to my environment if lets say I structurally built around VMware now running several different products under the same hood? I don’t know how this would affect my storage infrastructure and included API’s from EMC, NetApp, etc? Design, deployment, troubleshooting are all questions at this point. This is just the tip of the iceberg. I will say I would be a bit nervous putting this layer in my environment without a firm understanding of all impacts it would put on my infrastructure.

What it won’t solve:

It still won’t address any licensing issues around cost reduction. True you could say move your file servers to Hyper-v which is free with Windows server licenses and only keep your primary machines under VMware but that falls into the 80/20 principle and willing to bet that most of your production applications are high to mission critical and cannot afford any downtime, which is why people move to VMware and pay the extra premium.  However it could help lead down the path were you could give VMware a solid threat to migrate and have a powerful tool at your disposal.

Pricing:

The base price for the SuperVISOR platform is $25k, which includes support for vSphere + 1 other hypervisor and 5 hosts. That is all the details I have at this point. As I hear more I will update this posting.

Conclusion:

Overall this is a great step forward and depending on execution could change the virtualization landscape. I would assume that there will be a group of similar products over the next couple months as this idea gains traction. So I will be curious to see how fast Hotlink can move to market and get adoption going. Looking to seeing more updates.

vSphere Storage Appliance Overview

 

When VMware announced vSphere 5 they mentioned a new storage appliance called VSA or vSphere Storage Appliance (VSA).  It is intended to be used by smaller VMware environments who don’t/didn’t have a SAN or NAS array at their disposal. You know, because SAN’s are expensive, complex and such. Prior to this you could still deploy vSphere but you were heavily limited on the things that made vSphere so cool; vMotion, and HA for example.

That Sounds Nifty, how does that work?

It simply makes use of your server’s internal hard drives as a pooled shared resourced, pretty simple really.

Here is some more detail. For every ESXi server you will have a VSA deployed to it as a virtual machine. Making use of the available of the local disk (those hard drives that came with your server) on the ESXi host and it will pool these together and provide a replicated NFS volume for the ESXi server.  Once you do this on several hosts, then you should have a highly resilient storage backup system, since it will replicate these across all of the hosts providing a clustered and shared data store across all of your hosts.  Make sense?

Why I like it:

  •  Easy set-up, 5+ clicks and you are good to go, supposedly done in less that 10 minutes
  • Managed from vCenter, which is nice (doesn’t depend on vCenter to stay active, so you are safe if vCenter crashes)
  • Help lower CapEx and OpEx for your IT department, this is huge!
  • Because it uses Network Mirror and local RAID it is really robust with little investment on your part
  • Some rather unique custom settings: RAID 10, RAID 1, replacement of Node in case of failure.

 So does this mean you can kick EMC and NetApp to the curb?

Sorry not yet, keep writing those big checks but it will help in a variety of different scenarios.

Any remote location or branch office where you used to put a small SAN is a perfect example. Just simply beef up the hard drives on your servers and use those hosts as pooled storage.

Lab Environments are literately perfect for this. Now instead of waiting for some ancient hardware to come your way or beg management for a little money you can have a fully functioning SAN in your environment.

Very Small environments work great too, but just know this isn’t a permanent solution as of yet and wouldn’t replace a fully robust storage platform.

Limitations:

  • This is version 1 which means that while they claim it is 99.9% availability there isn’t any guarantees, and there may be some bugs
  • There is a limited list of compatible hardware
  • It doesn’t scale too well. Only supporting three virtualized hosts per instance
  • JBOD or external disk isn’t supported. Only Internal, I believe this is due to the RAID card built into the physical server hence why it needs to be on the HW compatibility list
  • Disk Capacity and VSA-Node count cannot be changed after set-up
  • Only vSphere 5 or later will support it at this time
  • Doesn’t support non VMware Machines…as in Hyper-V or Citrix
  • You need at least 2 nodes to make it work, so you will need at least 2 servers
  • Since it is replicated data, eats up space quickly on each server
  • Haven’t seen the performance numbers, but there will be some overhead and could limit the density of your server farm
  • Lastly, it is only local backup and won’t solve geographic disaster recovery

Big Picture:

This isn’t really a new idea, virtual iSCSI appliances have been around awhile and network RAID isn’t new either, LeftHand. But what it is doing is removing external needs for a VMware environment. By taking away the need for a 3rd party storage device it shortens the deployment time for your virtual environment. I highly doubt that this is the last involvement that VMware will have with storage and see them providing much more significant tools for managing your virtual information.  More to come.

For a Technical indepth view, take a look at this link.

vSphere 5 License Entitlements Tool

 

Still don’t understand the new vSphere licensing model? Can’t quite comprehend what you are entitled to from your existing vSphere environment? Need hard cost proof why you should or shouldn’t upgrade to vSphere 5? Tired of all of these rhetorical questions?

Good news below is a link to VMware’s vSphere Licensing Advisor. This is a tool that will let you to look at your 4.1, 4.0, or 3.5 environments and see what you are entitled to.

A Few Notes:

  • The tool requires JRE 1.6 or higher.
  • Editions are displayed as their vSphere 5.0 equivalents using standard entitlement paths.
  • If you have vCenter Servers in linked mode, you will need to connect to each vCenter Server.
  • The tool displays vRAM usage and capacity at the single point in time the data is gathered.
  • The tool will work in environments with Virtual Infrastructure 3.5, vSphere 4.0 and vSphere 4.1. Environments with vCenter Server 4.x managing Virtual Infrastructure 3.5 hosts are not supported with this tool.

Friday’s Infographic: The World Runs On VMware vSPHERE

Here is Friday’s Inforgraphic:

It is Offical VMware and Digital Fuel Are One

If you haven’t heard yet VMware acquired a SaaS IT financial management firm, Digital Fuel. There was a quiet announcement in June but for the most part it flew under the radar as most people were not familiar with their offerings. As of July Digital Fuel has closed and is now officially part of VMware.

Digital Fuel has been around for a while and they focus on the ability for companies to plan, manage, report etc. on the value and cost of a cloud based environment. In other words, they allow for detailed reporting on each cost of a piece of a cloud system. So for example, if HR spins up a virtual machine and hosts on the same host as AP you could actually figure out their share of the project and bill it back to the appropriate department.

I like this purchase for a few reasons. First, managing any IT project is complex, let alone a CLOUD or SaaS model and most IT departments end up carrying the budget burden of undefined expenses. Internal departments love assigning misc. and technology cost back to the IT department. Management then can’t find the difference between operations, productions, or separate capital project. It sucks if you are IT director trying to explain mysterious charges to your department.

Second, it shows the new direction the VMware is heading. It is feeling more and more that they are getting out of the traditional hypervisor business. From the new products and other acquisitions you see them evolving to more of a virtualization management company focusing on the different aspects of SaaS, application development, and cloud infrastructure.

Thirdly, it shows VMware moving up the enterprise stack. While VMware has 250,000+ customers the vast majority or in the mid market space, contrasting with Digital Fuel who focused primarily on fortune 100 companies like Cicso, Dell, GE, IBM etc.  This will allow VMware to start to play with some of previous dominant players in this space, specifically IBM software, Oracle, and SAP. There very well could be a power shift in the core enterprise accounts over the next couple years.

Some More Details:

Below is some of the quotes from the press release and related documents.

“Cloud computing represents a fundamentally new model for IT, enabling enterprises to realize unprecedented gains in operational efficiency, while also understanding, managing and optimizing IT resources based on granular business metrics,” said Boaz Chalamish, VP and General Manager, VMware. “New levels of financial visibility and control in cloud environments will enable CIOs to engage with the CFO, line of business stakeholders and others around how IT investments translate to real business value. As an authority on helping organizations navigate the business operations of IT, Digital Fuel will add a significant capability to our portfolio, broadening beyond operational management to include business-centric capabilities.”

And

Digital Fuel’s portfolio for IT costing, budget, chargeback, cost optimization, vendor management and SLA management integrates with a broad set of systems, applications, data sources and third-party management technologies to deliver comprehensive, unified financial analysis.  These offerings, offered both on-premise within an enterprise datacenter and delivered via Software as a Service (SaaS) models for maximum flexibility, will complement VMware’s portfolio of management solutions including vCenter Chargeback and Service Manager. The acquisition of Digital Fuel will enable VMware’s enterprise customers to:

  • Engage more effectively with business stakeholders through meaningful measurements and reports, including a Bill of IT Services, chargeback, service level reporting, and vendor scorecards.
  • Gain complete, consolidated visibility into IT costs (Capex, Opex and Service costs) across a broad range of financial data sources.
  • Manage IT agendas with deep financial discipline, leveraging fact-based decisions across the IT portfolio to make informed financial trade-offs aligned to business priorities.

From Ramin Sayar, VP, Marketing, Blog:

This is why VMware is acquiring Digital Fuel. It’s about providing our customers with the deep visibility and the right measurement tools they need to manage IT in the right way. Specifically, I’m talking about the ability to measure the costs and SLAs associated with a particular IT service whether sourced internally through your private cloud or externally from a cloud or SaaS provider. So you can stand up and have a fact-based, numbers-driven discussion with your CFO or CEO. And the combination of VMware and Digital Fuel is a perfect fit for this. The acquisition brings together our deep insight into the dynamically changing virtual infrastructure which is the very foundation for cloud computing, as well as our growing portfolio of application and end user computing solutions that are re-defining how IT is enabling your business processes. The combination of these solutions with Digital Fuel’s pioneering capabilities gives you the unprecedented ability to manage every aspect of your services from a financial – and business – perspective.

V-Index Reports Q2 Hypervisor Use For VMware is 57%

Below is the latest (Q2) virtualization survey form V-Index. Shows VMware still holding the majority of the market share. Will be curious how this plays out for Q3 and Q4.

Credit: v-index

vCenter Operations: Expensive? Maybe, But It Is Worth It!

If you didn’t know, today is national vCenter Operations day!

So I thought it would be useful to go over some of the finer points of this product. I am however, going to do things a little backwards. With some of the earlier reviews people were pointing out that the licensing and cost of this product is a bit high, its per VM again.  Now compared to other monitoring tools, I would agree, but what people are forgetting is that the model of per CPU will be going away across the board at some point and the all you can eat model is a thing of the past.

Price:

  • Standard: $1,250 for a 25 VM pack or $50 a server.
  • Advanced: $3,125 for a 25 VM pack or $125 a server.
  • Enterprise: $34,250 for a 25 VM pack or $1,370 a server, and not that isn’t a typo.

Why so much?

Because it is a useful and valuable tool, because too many people deploy their virtual environment blindly using excel sheets and homemade solutions, because people don’t know what is going on before it is too late, and many more good reasons. Some argue they have a monitoring solution; this will compliment the solution and add much more value. The truth is people of have a production server environment can’t afford not to have this solution. Slow performance cause slow productivity, which equals real lost dollars.

 Features:

 Standard

  • Designed to work with vCenter
  • Performance analytics, automatically identities building performance issues and their root causes
  • Optimizes resource usage and maintains configuration compliance
  • Real-time capacity metrics
  • Configuration Change Events (huge value here)

 Advanced

  • All of the above plus
  • vCenter CapacityIQ

Enterprise

  • All of the above plus
  • More advanced features
  • vCenter Configuration Manager

The real scoop

It is a must have if you have any high performance applications, more than 10 VM’s (25 packs I know) but still, or any tier one applications. Its true, in my opinion it should be included for free, but it is a high quality product that carries a lot value.

More Information:

http://www.vmware.com/products/vcenter-operations/overview.html

vShield 5: New Security Features Coming Soon

 

VMware vShield 5 was announced around the same time as vSphere 5 but for some reason it sort of flew under the radar. Some would say it had something to due to the licensing drama, but who really knows. What I do know is that 1) securing VM’s is an evolving problem that has been limited to hardware enforcement  and 2) VMware is starting to invest significant more resources towards their vShield suite since its launch in August 2010.

If your remember vShield includes vShield App, vShield Edge, and vShield Endpoint and if you curious what was included in more detail with that launch you can find more here from my previous post. In short it was a good start but not a full solution.

 So What’s New:

vShield App now includes Data Security designated for compliance confidence, think data scanning. This hypervisor-based application aware-firewall will create and enforce dynamic application boundries, aka trust zones based on policies vs. physical boundaries of yesteryear. This should help cut down on the hardware costs!

There is now a collaboration with RSA (Another EMC company, no surprise here) that is designed to “optimize the security for virtual and cloud environments.”  “This security protocol will enable enterprises to discover and classify sensitive data residing within the virtual machines.” So if someone is sending Social Security cards, credit cards, or personal information it can within the VM detect this leak. Plus it is host based and agent-less.

Also, based on pre-defined templates, 80 or so, you will now be able to select policies that affect your business, not sure yet if you can modify these presets or not. These policies scan the VM forsensitive data and report back the findings. You can even set a policy if it finds this data it will isolate this VM keeping the sensitive information in its trust zone. Performance shouldn’t be impacted much since it will be using a virtual appliance. The thing to note is that it will report and isolate, see below.

 Doe this solve our Data Loss Prevention (DLP) Problem?

Not so fast. They still have a long way to go. Remember detect, report and isolate not detect, report and block.  To be clear this is a just a detection tool with minor policy enforcement. It will be more clear come demo time at VMworld, but it is missing some key components to be a full DLP solution. For example it doesn’t detect data leaks in transit, won’t prohibit moving data to the cloud, and doesn’t go in-depth enough to protect ultra sensitive data.  It is a good start, and there will be a future release with API’s to integrate to other DLP software.

 Cost:

The VMware vShield 5 is expected to be available in Q3 2011 and individual products will be licensed per VM (noticing a trend?) starting at $50 per VM retail. The vShield products can also be purchased together as a vShield bundle for $300 per VM.

More Information:

http://www.vmware.com/products/vshield/overview.html