VMware Virtualization Forum 2008

VMware logoA few days back, I wrote a post about why I don’t write much about VMware. This VMware-blindness is not entirely through choice – and I do believe that I need to keep up to speed on their view of the virtualisation market in order to remain objective when I talk about competitive offerings from Microsoft.

With that in mind, I spent today at the VMware Virtualization Forum 2008 – a free of charge event for VMware customers. I went to a similar event two years ago (when I was working on a VI3 deployment) and found it very worthwhile so I was pleased to be back again this year (I don’t know what happened in 2007!). It’s not a technical event – this is pure sales and marketing, with all the usual sponsors – but it did give me an overview of many of the announcements from last week’s VMworld conference in Las Vegas.

The event started late and, after keeping everyone waiting for 20 minutes, Chris Hammond, VMware’s Regional Director for the UK and Ireland had the audacity to ask delegates to make sure they arrive in the session rooms on time! There was the expected plug for the European version of the VMworld conference and then the keynote began, presented by Lewis Gee, VMware’s Vice President of field operations for EMEA. After a disclaimer that any of the future products discussed were for the purposes of sharing VMware’s vision/roadmap and may be subject to change, he began to look at how VMware has reached its current market position and some of the developments for the future.

Key points from the keynote were:

  • The growth of the virtualisation market:
    • x86 servers have proliferated. Typically a single application is running on each server, working at 5-10% utilisation.
    • Virtual machines allowed the partitioning of servers so that many virtual server instances could exist on a single physical server.
    • Virtualisation was initially used in test and development environment but is now increasingly seen in production. The net result is a consolidation of physical servers but there is still significant growth.
    • As virtualisation technology started to take hold customers began to look at the datacentre as a whole – VMware’s answer was Virtual Infrastructure.
    • Even now, there is significant investment in server hardware – in 2007, 8 million servers shipped (7.6m of which were x86/x64 servers).
    • The base component for VMware’s datacentre offerings is VMware’s bare-metal hypervisor – in paid (ESX) and free (ESXi) form. Whilst VMware now faces stiff competition from Microsoft and others, they were keen to highlight that their platform is proven and cited 120,000 customers, over 7 years, with 85% of customers using in production, and years of uptime at some customer sites.
  • ESXi uses just 32MB on disk – less code means fewer bugs, fewer patches, and VMware argues that their monolithic approach has no dependence on the operating system or arbitrary drivers (in contrast to the approach taken by Microsoft and others).
  • In the face of new competitive pressures (although I doubt they would admit it), VMware are now focusing on improved management capabilities using a model that they call vServices:
    • At the operating system level, VMware Converter provides P2V capabilities to allow physical operating system instances to be migrated to the virtual infrastructure.
    • Application vServices provide availability, security, and scalability using established technologies such as VMotion, Distributed Resource Scheduler (DRS), VMware High Availability (HA) and Storage VMotion.
    • Infrastructure vServices include vCompute, vStorage and vNetwork – for example, at VMworld, Cisco and VMware announced the Nexus 1000v switch – allowing network teams to look at the infrastructure as a whole regardless of whether it is physical or virtual.
    • Security vServices are another example of where VMware is partnering with other companies and the VMSafe functionality allows security vendors to integrate their solutions as another layer inside VI.
    • All of this is supplemented with Management vServices (not just from VMware but also integration with third party products).
    • Finally, of course the whole virtual infrastructure runs on a physical datacentre infrastructure (i.e. hardware).
  • All of this signals a move from a virtual infrastructure to what VMware is calling the Virtual Datacenter Operating System. It’s pure marketing speak but the concept is one of transforming the datacentre into an internal “cloud”. The idea is that the internal cloud is an elastic, self-managing and self-healing utility which should support federation with external clouds of computing and free IT from the constraints of static hardware-mapped applications (all of which sounds remarkably like Gartner’s presentation at the Microsoft Virtualization launch).
  • Looking to the future, VMware plan to release:
    • vCloud – enabling local cloud to off-premise cloud migration (elastic capacity – using local resources where available and supplementing these with additional resources from external sources as demand requires). There are not yet many cloud providers but expect to see this as an emerging service offering.
    • vCenter AppSpeed – providing quality of service (QoS) for a given service (made up of a number of applications, virtual machines, users, servers and datacentres); based around a model of discover, monitor and remediate.
    • VMware Fault Tolerance – application protection against hardware failures with no downtime (application and operating system independent) using mirrored virtual machine images for full business continuity.
  • Up to this point, the presentation had focused on datacentre developments but VMware are not taking their eyes off desktop virtualisation. VMware see desktops following users rather than devices (as do Microsoft) and VMware Virtual Desktop Infrastructure (VDI) is being repositioned as VMware View – providing users with access to the same environment wherever the desktop is hosted (thin client, PC, or mobile).
  • In summary, after 10 years in desktop virtualisation, 7 years in server virtualisation and 5 years in building a management portfolio (mostly through acquisition), VMware is now looking to the cloud:
    • Virtual Datacenter OS is about the internal cloud – providing efficient and flexible use of applications and resources.
    • vCloud is the initiative to allow the virtual datacentre to scale outside the firewall, including federation with the cloud.
    • VMware View is about solving the desktop dilemma – making the delivery of IT people and information centric.

VMware Virtual Datacenter OS

Next up was a customer presentation – with Lawrence Clark from Carphone Warehouse recounting his experiences of implementing virtualisation before Richard Garsthagen (Senior Evangelist at VMware) and Lee Dilworth (Specialist System Engineer at VMware) gave a short demonstration of some of the technical features (although there was very little there that was new for anyone who has seen VMware Virtual Infrastructure before – just, VMotion, HA, DRS and the new VMware fault tolerance functionality).

Following this, were a number of breakout sessions – and the first one I attended was Rory Clements’ presentation on transforming the datacentre through virtualisation. Rory gave an overview of VMware’s datacentre virtualisation products, based around a model of:

  1. Separate, using a hypervisor such as ESXi to run multiple virtual machines on a single physical server, with the benefits of encapsulation, hardware independence, partitioning and security through isolation.
  2. Consolidate, adding management products to the hypervisor layer, resulting in savings on capital expenditure as more and more servers are virtualised, running on a shared storage platform and using dynamic resource scheduling.
  3. Aggregate (capacity on demand), creating a virtual infrastructure with resource pooling, managed dynamically to guarantee application performance (a bold statement if ever I heard one!). Features such as VMotion can be used to remove planned downtime through live failover and HA provides a clustering capability for any application (although I do consider HA to be a misnomer in this case as it does require a restart).
  4. Automate (self-managing datacenter), enabling business agility with products/features such as: Stage Manager to automate the application provisioning cycle; Site Recovery Manager to create a workflow for disaster recovery and automatically fail entire datacentres over between sites; dynamic power management to move workloads and shut down virtualisation hosts that are not required to service current demands; and Update Manager, using DRS to dynamically reallocate workloads, then put a host into maintenance mode, patch, restart and bring the server online, before repeating with the rest of the nodes in the cluster.
  5. Liberate (computing clouds on and off premise) – create a virtual datacentre operating system with the vServices covered in the keynote session.

In a thinly veiled swipe at competitive products that was not entirely based on fact, Rory indicated that Microsoft were only at the first stage – entirely missing the point that they too have a strong virtualisation management solution and can cluster virtualisation hosts (even though the failover is not seamless). I don’t expect VMware to promote a competitive solution but the lack of honesty in the pitch did have a touch of the “used-car salesman” approach to it…

In the next session, Stéphane Broquère, a senior product marketing manager at VMware and formerly CEO at Dunes Technologies (acquired by VMware for their virtualisation lifecycle management software) talked about virtual datacentre automation with VMware:

  • Stéphane spoke of the virtual datacentre operating system as an elastic, self-managing, self-healing software substrate between the hardware pool and applications with software provisioned and allocated to hardware upon demand.
  • Looking specifically at the vManagement technologies, he described vApps using the DTMF open virtualisation format (OVF) to provide metadata which describes the application, service and what it requires – e.g. name, ports, response times, encryption, recovery point objective and VM lifetime.
  • vCenter is the renamed VirtualCenter with a mixture of existing and new functionality. Some products were skipped over (i.e. ConfigControl, CapacityIQ, Chargeback, Orchestrator, AppSpeed) but Stéphane spent some time looking at three products in particular:
    • Lifecycle Manager automates virtual machine provisioning, and provides intelligent deployment, tracking and decommissioning to ensure that a stable datacentre environment is maintained through proper approvals, standard configuration procedures and better accountability – all of which should lead to increased uptime.
    • Lab Manager provides a self-provisioning portal with an image library of virtual machine configurations, controlled with policies and quotas and running on a shared pool of resources (under centralised control).
    • Stage Manager targets release management by placing virtual machine images into a configuration (a service) and then promoting or demoting configurations between environments (e.g. integration, testing, staging, UAT and production) based on the rights assigned to a user. Images can also be archived or cloned to create a copy for further testing.
  • Over time, the various vCenter products (many of which are the result of acquisitions) can be expected to come together and there will be some consolidation (e.g. of the various workflow engines). In addition, VMware will continue to provide APIs and SDKs and collaborate with partners to extend.

After lunch, Lee Dilworth spoke about business continuity and disaster recovery, looking again at VMware HA, VMotion, DRS and Update Manager as well as other features that are not always considered like snapshots and network port trunking.

He also spoke of:

  • Experimental VM failure monitoring capabilities that monitor guest operating systems for failure and the ability to interpret hardware health information from a server management card.
  • Storage VMotion – redistributing workloads to optimise the storage configuration, providing online migration of virtual machine disks to a new data store with zero downtime, using a redo log file to capture in-flight transactions whilst the file copy is taking place (e.g. when migrating between storage arrays).
  • VMware Fault Tolerance – providing continuous availability, although still not an ideal technology for stretch clusters. It should also be noted that VMware Fault Tolerance is limited to a single vCPU and the shadow virtual machine is still live (consuming memory and CPU resources) so is probably not something that should be applied to all virtual machines.
  • vCenter Data Recovery (formerly VMware Consolidated Backup) – providing agentless disk-based backup and recovery, with virtual machine or file level restoration, incremental backups and data de-duplication to save space.
  • Site Recovery Manager (SRM) – allowing seamless failover between datacentres to restart hundreds of virtual machines on another site in the event of an unplanned or planned outage. Importantly, SRM requires a separate Virtual Center management framework on each site and replicated fibre channel or iSCSI LUNs (NFS will follow next year). It is not a replacement for existing storage replication products (it is an orchestration tool to integrate with existing replication products) nor is it a geo-clustering solution.

In the final session of the day, Reg Hall spoke about using virtual desktop infrastructure technologies to provide a desktop service from the datacentre. Key points were:

  • VMware has three desktop solutions:
    • Virtual Desktop Infrastructure (VDI), consisting of a the virtual desktop manager (VDM) connection broker, and standard Virtual Infrastructure functionality. Connected users access a security server and authenticated VDM then manages access to a pool of virtual desktops.
    • Assured Computing Environment (ACE), providing a portable desktop that is managed and secured with a central policy.
    • ThinApp (formerly Thinstall) for application virtualisation, allowing an application to be packaged once and deployed everywhere (on a physical PC, blade server, VDI, thin client, ACE VM, etc.) – although I’m told (by Microsoft) that VMware’s suggestion to use the product to run multiple versions of Internet Explorer side by side would be in breach of the EULA (I am not a lawyer).
  • Highlighting VMware’s memory management as an advantage over competitive solutions (and totally missing the point that by not buying VMware products, the money saved will buy a lot of extra memory), VMware cited double memory overcommitment when running virtual desktops; however their own performance tuning best practice guidance says “Avoid high memory overcomittment [sic.]. Make sure the host has more memory than the total amount of memory that will be used by ESX plus the sum of the working set sizes that will be used by all the virtual machines.”.
  • Assuming that hypervisors will become a target for attackers (a fair assumption), VMSafe provides a hardened virtual machine to protect other workloads through inspection of the virtual infrastructure.
  • As VDI becomes VMware View, desktops will follow users with the same operating system, application and data combinations available from a thin client, thick client (using client virtualisation – e.g. a desktop hypervisor) or even on a mobile device with the ability to check a desktop in/out for synchronisation with datacentre of offline working.
  • VDM will become View Manager and View Composer will manage the process of providing a single master virtual machine with many linked clones, appearing as individual systems but actually a single, scalable virtual image. At this point, patching becomes trivial, with patches applied to the master effectively being applied throughout the VMware View.
  • Other developments include improvements to connection protocols (moving away from RDP); improved 3D graphics virtualisation and a universal client (a device-independent client virtualisation layer).

Overall, the event provided me with what I needed – an overview of the current VMware products, along with a view of what is coming onstream over the next year or so. It’s a shame that the VMware Virtualization Forum suffered from poor organisation, lousy catering (don’t invite me to arrive somewhere before 9, then not provide breakfast, and start late!) and a lack of a proper closedown (the sessions ended, then there were drinks, but no closing presentation) – but the real point is not the event logistics but where this company is headed.

Behind all the marketing rhetoric, VMware is clearly doing some good things. They do have a lead on the competition at the moment but I’ve not seen any evidence that the lead is as advanced as the statements that we’ve-been-doing-hypervisor-based-virtualisation-for-7-years-and-Microsoft-is-only-just-getting-started would indicate. As one VMware employee told me, at last year’s event there was a lot of “tyre-kicking” as customers started to warm up to the idea of virtualisation whereas this year they want to know how to do specific things. That in itself is a very telling story – just because you have the best technology doesn’t mean that’s what customers are ready to deploy and, by the time customers are hosting datacentres in the cloud and running hypervisor-based client operating systems, VMware won’t be the only company offering the technology that lends itself to that type of service.

Microsoft Virtualization: part 2 (host virtualisation)

Earlier this evening I kicked off a series of posts on the various technologies that are collectively known as Microsoft Virtualization and the first area I’m going to examine is that of server, or host, virtualisation.

Whilst competitors like VMware have been working in the x86 virtualisation space since 1998, Microsoft got into virtualisation through acquisition of Connectix in 2003. Connectix had a product called Virtual PC and, whilst the Mac version was dropped just as MacOS X started to grow in popularity (with its place in the market taken by Parallels Desktop for Mac and VMware Fusion), there have been two incarnations of Virtual PC for Windows under Microsoft ownership – Virtual PC 2004 and Virtual PC 2007.

Virtual PC provides a host virtualisation capability (cf. VMware Workstation) but is aimed at desktop virtualisation (the subject for a future post). It does have a bastard stepchild (my words, albeit based on the inference of a Microsoft employee) called Virtual Server, which uses the same virtual machine and virtual hard disk technology but is implemented to run as a service rather than as an application (comparable with VMware Server) with a web management interface (which I find clunky – as Microsoft’s Matt McSpirit once described it, it’s a bit like Marmite – you either love it or hate it).

Virtual Server ran its course and the latest version is Virtual Server 2005 R2 SP1. The main problem with Virtual Server is the hosted architecture, whereby the virtualisation stack runs on top of a full operating system and involves very inefficient context switches between user and kernel mode in order to access the server hardware – that and the fact that it only supports 32-bit guest operating systems.

With the launch of Windows Server 2008, came a beta of Hyper-V – which, in my view, is the first enterprise-ready virtualisation product that Microsoft has released. The final product shipped on 26 June 2008 (as Microsoft’s James O’Neill pointed out, the last product to ship under Bill Gates’ tenure as a full-time Microsoft employee) and provides a solid and performant hypervisor-based virtualisation platform within the Windows Server 2008 operating system. Unlike the monolithic hypervisor in VMware ESX which includes device drivers for a limited set of supported hardware, Hyper-V uses a microkernalised model, with a high performance VMbus for communication between guest (child) VMs and the host (parent) partition, which uses the same device drivers as Windows Server 2008 to communicate with the hardware. At the time of writing, there are 419 server models certified for Hyper-V in the Windows Server Catalog.

Architecturally, Hyper-V has almost nothing in common with Virtual PC and Virtual Server, although it does use the same virtual hard disk (.VHD) format and virtual machines can be migrated from the legacy platforms to Hyper-V (although, once the VM additions have been removed and replaced with the Hyper-V integration components, they cannot be taken back into a Virtual PC/Virtual Server environment). Available only in 64-bit editions of Windows Server 2008, Hyper-V makes use of hardware assisted virtualisation as well as security features to protect against buffer overflow attacks.

I’ve written extensively about Hyper-V on this blog but the main posts I would highlight for information on Hyper-V are:

Whilst Hyper-V is a remarkably solid product, to some extent the virtualisation market is moving on from host virtualisation (although it is an enabler for various related technologies) and there are those who are wary of it because it’s from Microsoft and its a version 1 product. Then there are those who highlight it’s supposed weaknesses… mostly FUD from VMware (for example, a few days back a colleague told me that he couldn’t implement Hyper-V in an enterprise environment because it doesn’t support failover – a completely incorrect statement).

When configured to use Windows Server 2008’s failover clustering technologies, Hyper-V can save the state of a virtual machine and restart it on another node, using a technology known as quick migration. Live migration (where the contents of memory are copied on the fly, resulting in seamless failover between cluster nodes in a similar manner to VMware VMotion) is a feature that was removed from the first release of Hyper-V. Whilst this has attracted much comment, many organisations who are using virtualisation in a production environment will only fail virtual machines over in a controlled manner – although there will be some exceptions where live migration is required. Nevertheless, at the recent Microsoft Virtualization launch event, Microsoft demonstrated live migration and said it will be in the next release of Hyper-V.

Memory management is another area that has attracted attention – VMware’s ESX product has the ability to overcommit memory as well as to transparently share pages of memory. Hyper-V does not offer this and Microsoft has openly criticised memory overcommitment because the operating system things it is managing memory paging, meanwhile the virtual memory manager is swapping pages to disk whilst transparent page sharing breaks fundamental rules of isolation between virtual machines.

Even so, quoting from Steven Bink’s interview with Bob Muglia, Vice President of Microsoft’s Server and Tools division:

“We talked about VMware ESX and its features like shared memory between VMs, ‘we definitely need to put that in our product’. Later he said it will be in the next release – like hot add memory, disk and NICs will be and live migration of course, which didn’t make it in this release.”

[some minor edits made for the purposes of grammar]

Based on the comments that have been made elsewhere about shared memory management, this should probably be read as “we need something like that” and not “we need to do what VMware has done”.

Then there is scalabilty. At launch, Microsoft cited 4-core, 4-way servers as the sweet spot for virtualisation, with up to 16 cores supported, running up to 128 virtual machines. Now that Intel has lauched it’s new 6-core Xeon 7400 processors (codenamed Dunnington), an update has been released to allow Hyper-V to support 24 cores (and 192 VMs), as described in Microsoft knowledge base article 956710. Given the speed in which that update was released, I’d expect to see similar improvements in line with processor technology enhancements.

One thing is for sure, Microsoft will make some significant improvements in the next full release of Hyper-V. At the Microsoft Virtualization launch, as he demonstrated live migration, Bob Muglia spoke of the new features in the next release of Windows Server 2008, and Hyper-V (which I interpreted as meaning that Hyper-V v2 will be included in Windows Server 2008 R2currently scheduled for release in early 2010). Muglia continued by saying that:

“There’s actually quite a few new features there which we’ll talk about both at the upcoming PDC (Professional Developer’s Conference) in late October, as well as at WinHEC which is the first week of November. We’ll go into a lot of detail on Server 2008 R2 at that time.”

In the meantime, there is a new development – the standalone Hyper-V Server. Originally positioned as a $28 product for the OEM and enterprise channels, this will now be a free of charge download and is due to be released within 30 days of the Microsoft Virtualization launch (so, any day now).

As detailed in the video above, Hyper-V Server is a “bare-metal” virtualisation product and is not a Windows product (do the marketing people at Microsoft really think that Microsoft Hyper-V Server will not be confused with the Hyper-V role in Microsoft Windows Server?).

With just a command line interface (as in server core installations of Windows Server 2008), it includes a configuration utility for basic setup tasks like renaming the computer, joining a domain, updating network settings, etc. but is intended to be remotely managed using the Hyper-V Manager MMC on Windows Server 2008 or Windows Vista SP1, or with System Center Virtual Machine Manager (SCVMM) 2008.

Whilst it looks similar to server core and uses some Windows features (e.g. the same driver model and update mechanism) it has a single role – Microsoft Hyper-V and does not support features in Windows Server 2008 Enterprise Edition like failover clustering (so no quick migration) although the virtual machines can be moved to Windows Server 2008 Hyper-V if required at a later date. Hyper-V Server is also limited to 4 CPU sockets and 32GB of memory (as for Windows Server 2008 Standard Edition). I’m told that Hyper-V Server has a 100MB memory footprint and uses around 1TB of disk (which sounds a lot for a hypervisor – we’ll see when I get my hands on it in a few days time).

Unlike Windows Server 2008 Standard, Enterprise and Datacenter Editions, Hyper-V Server will not require client access licenses (although the virtual machine workloads may) and it does not include any virtualisation rights.

That just about covers Microsoft’s host virtualisation products. The next post in this series will look at various options for desktop virtualisation. In the meantime, I’ll be spending the day at VMware’s Virtualisation Forum in London, to see what’s happening on their side of the fence.