+ All Categories
Home > Technology > Redhat rhev 31-update by syedmshaaf

Redhat rhev 31-update by syedmshaaf

Date post: 19-May-2015
Category:
Upload: syed-m-shaaf
View: 1,331 times
Download: 1 times
Share this document with a friend
Description:
RHEV / KVM
Popular Tags:
28

Click here to load reader

Transcript
Page 1: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf1

Red Hat Enterprise Virtualization 3.1

Syed M ShaafSolutions ArchitectRed HatNovember 2012

Page 2: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf2

RHEV Overview

Page 3: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf3

● High Availability

● Live Migration

● Load Balancing (DRS)

● Power Saver (DPM)

● Templates, thin provisioning, snapshots

● Centralized storage and networking management

● V2V

● Power User Portal

● Reporting Engine

RED HAT ENTERPRISE VIRTUALIZATIONRHEV MANAGER FEATURES

Page 4: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf4

● Host: 160 logical CPU (4,096 theoretical max), 2 TB RAM (64TB theoretical max)

● Guest: 64 vCPU, 512 GB RAM

● Supports latest silicon virtualization technology

● Based on the latest RHEL 6 kernel

● Microsoft SVVP certified

RHEV HYPERVISOR/KVM OVERVIEWSCALABILITY

SMALL FORM FACTOR, SCALABLE, HIGH PERFORMANCE

Page 5: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf5

SPICE: EXCEPTIONAL USER EXPERIENCE

User experience comparable to a local desktop PC

Bi-directional audio & video

VoIP & video conferencing

HD quality video

Hi resolution 2560x1600 (each)

Up to 4 monitors

USB redirection for nearly any

device

Smart Card/CAC authentication

Copy & paste

Page 6: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf6

SPICE: BUILT FOR VIRTUAL DESKTOPS

Adaptive Protocol Dynamically chooses optimal point to

process graphics Renders locally on client or falls back

to server or VM Improved network support for WAN

Enhanced bandwidth and latency tolerance

Optional SSL encryption Highest server density levels

Page 7: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf7

RHEV 3.0 REPORTING

Historical usage, trending, quality of service

Integrated reporting engine based on Jasper reports

Over 25 prebuilt reports and dashboards included

Ability to create and customize reports and templates

Page 8: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf8

● Integrated through the RHEV API

● Certified by Red Hat to work with RHEV

● Free trials available via the RHEV Marketplace

● Visit our ISV partners at the Partner Pavillion and RHEV Campgrounds

Capacity & Performance Management

OperationsMonitoring

Security

Backup & Disaster

Recovery

ApplicationDelivery

VDI

Capacity Planning &

P2V, V2V

RED HAT ENTERPRISE VIRTUALIZATIONISV PARTNERS

http://marketplace.redhat.com

Page 9: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf9

INDUSTRY LEADING VIRTUALIZATION PERFORMANCE

● SPECvirt_sc2010: As of September 1, 2012, RHEV claims top 7 results and the only 8-socket server scores

Red Hat

VMware

Page 10: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf10

RED HAT ENTERPRISE VIRTUALIZATIONHYPERVISOR

● Standalone hypervisor● Small footprint

● Customized 'spin' of RHEL + KVM● 'Just enough' RHEL to run virtual

machines● Security hardened image● Runs on all RHEL hardware ● with Intel VT/AMD-V CPUs

● Easy to install, configure and upgrade

● PXE boot, USB boot, CD or Hard drive

Page 11: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf11

RHEV inherits the security features of Linux and RHEL

SELinux security policy infrastructure

Provides protection and isolation for virtual machines and host

Compromised virtual machine cannot access other VMs or host

sVirt Project

Sub-project of NSA's SELinux community. Provides “hardened” hypervisors

Multilevel security. Isolate guests

Contain any hypervisor breaches

RED HAT ENTERPRISE VIRTUALIZATIONSECURITY

Page 12: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf12

Security - SELinux to the rescue

SELinux is all about labeling

● Processes get labels – virtual machines with KVM are processes

● Files and devices get labels – virtual images are stored on files and devices

● Rules control how process labels interact with file labels and other process labels

● The kernel enforces these rules

Page 13: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf13

KVM guests are processes, so we can confine them like processes

Page 14: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf14

Compromised virtual machine guest confined, despite its vulnerability

Page 15: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf15

And of course, the guest operating system can also run SELinux

Page 16: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf16

RHEV 3.0 ARCHITECTURE

RHEV-Manager is now a Java application running on JBoss EAP on RHEL

Backend database is now PostgreSQL 8.4

New user portal, REST API, Linux CLI

Support for multiple external authentication sources

Red Hat IPA Microsoft Active Directory

Page 17: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf17

RHEV 3.0 - Integration

● Hook scripts are called at specific VM lifecycle events● VDSM (management agent) Start● Before VM start● After VM start● Before VM migration in/out● After VM migration in/out● Before and After VM Pause● Before and After VM Continue● Before and After VM Hibernate● Before and After VM resume from hibernate● On VM stop● On VDSM Stop

➔Hooks can modify a virtual machines XML definition before VM start➔Hooks can run system commands – e.g.. Apply firewall rule to VM

Page 18: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf18

Integration & API

RED HAT ENTERPRISE VIRTUALIZATIONRHEV 3.1

Python SDK - Python SDK for developers

Page 19: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf19

User Interface

- Full support for Web Admin- Remove .NET Windows Admin Portal

Web Admin

RED HAT ENTERPRISE VIRTUALIZATIONRHEV 3.1

Page 20: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf20

Platform Infrastructure

- Reduced in-memory footprint- Reduced startup time - Improved performance and scalability

JBoss EAP 6

- Run on 100% open source infrastructure- No requirement for proprietary Oracle JRE

OpenJDK

Jasper 4.7

Directory Servers

RED HAT ENTERPRISE VIRTUALIZATIONRHEV 3.1

- Support for two new directory servers- Red Hat Directory Server- IBM Tivoli Directory Server

- Move to the latest JasperSoft reporting engine

Page 21: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf21

Platform Infrastructure

RED HAT ENTERPRISE VIRTUALIZATIONRHEV 3.1

Quotas

- 160 Virtual CPUs per VMGuest Scalability

- 2 TB Virtual RAM per VM

- New Intel Core i3, i5, i7 (code named “Sandy Bridge”)New CPU Support

- New AMD family 15h processors (code named “Bulldozer”)

- Quotas for storage, CPU and memory

- Quickly migrate Physical machine to VirtualP2V

Page 22: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf22

User Interface

RED HAT ENTERPRISE VIRTUALIZATIONRHEV 3.1

Reports Integration

- Integrate Reports / Dashboard into web admin portal- Single Signon between Admin portal and Jasper Reports

Page 23: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf23

Networking

RED HAT ENTERPRISE VIRTUALIZATIONRHEV 3.1

Hot plug/unplug - Hot plug/unplug virtual machine's network interface

Page 24: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf24

Storage

- Hot plug/unplug virtual machine disk imageHotplug Disk

RED HAT ENTERPRISE VIRTUALIZATIONRHEV 3.1

- New UI for managing internal and external (direct lun) disksDisk Management

Page 25: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf25

Storage

RED HAT ENTERPRISE VIRTUALIZATIONRHEV 3.1

Direct LUN - UI support for configuring direct LUN access for virtual machine

Page 26: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf26

Storage

RED HAT ENTERPRISE VIRTUALIZATIONRHEV 3.1

Storage Migration - Live migration of virtual machine disk between storage domains Tech Preview

Page 27: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf27

PHYSICAL TO VIRTUAL TO CLOUD

Page 28: Redhat rhev 31-update by syedmshaaf

RED HAT ENTERPRISE VIRTUALIZATION Update | Syed M Shaaf28

Thank you


Recommended