What’s New in vSphere 4.

0:
Technical Overview
 Introducing VMware vSphere™
.Net Windows Linux J2EE Grid Web 2.0 SaaS
vApp

vCenter Suite

Availability Security Scalability

VMotion
Application Storage VMotion
vShield Zones DRS
Services HA
VMSafe Hot Add
Fault Tolerance
Data Recovery

vCompute vStorage vNetwork VMware

VMFS vSphere™ 4.0
Infrastructure ESX Thin
ESXi Provisioning Distributed Switch
Services DRS/DPM VMFS Volume
Grow

Internal Cloud External Cloud

*Note vCenter Server and its components are a separate purchase
2
Infrastructure Services Deliver CapEx and OpEx Savings
VMware vSphere™ 4.0

Infrastructure
vCompute vStorage vNetwork
Services

Storage/network vStorage Thin vNetwork

optimizations Provisioning Distributed Switch
NEW

Power VMFS Volume Third party

Management Grow distributed virtual
VMDirectPath I/O switches
CPU/Memory vStorage VMFS vNetwork
CURRENT

optimization Standard Switch

DRS

Highest consolidation ratios in the industry

Most efficient use of hardware resources
Low operational overhead
3
vSphere 4.0 Infrastructure Services: vCompute
VMware vSphere™ 4.0

Infrastructure
vCompute vStorage vNetwork
Services

ESX Service Console updates

Enhanced cluster resource usage views
NEW

Expanded DRS information

Expanded support for Distributed Power Management
CURRENT

CPU/Memory optimization
DRS

4
 vCompute vStorage vNetwork

ESX 4 Service Console

64-bit, 2.6-based Linux kernel compatible with RHEL 5.2

and CentOS 5.2
Supports both 32-bit and 64-bit applications
Console root file system is a VMDK file
VMkernel runs and owns device drivers Service
Console
Network interfaces fully support IPv6
Provides enhanced security via Address Space
Layout Randomization (ASLR)
Some features no longer supported
No longer a development environment

5
 vCompute vStorage vNetwork

New Resource Distribution Charts

6
 vCompute vStorage vNetwork

New DRS Management Pages

Recommendations page

Refresh
Edit cluster recommendations
properties

Faults page
Apply a subset of Apply all selected
recommendations recommendations
Faults view displays issues that
prevented DRS from providing
or applying recommendations.

Customize the
Actions taken based on
History tab recommendations
display

7
 vCompute vStorage vNetwork

Scheduled Task to Change Resource Settings

Home > Management >
Scheduled Tasks > Add

To accommodate business priorities that

change over time, schedule tasks to
change resource settings.

8
 vCompute vStorage vNetwork

VMware DPM Expanded Support

DPM consolidates workloads to

reduce power consumption
Cuts power and cooling costs
Automates management of energy
efficiency

Supports three wake protocols:

Intelligent platform management
Resource Pool interface (IPMI)
Integrated Lights-Out (iLO)
Wake-On-LAN (WOL)

Power Configure and test wake on every

Optimized
host in cluster
Standby Host
Server

9
vSphere 4.0 Infrastructure Services: vStorage
VMware vSphere™ 4.0

Infrastructure
vCompute vStorage vNetwork
Services

Pluggable Storage Architecture

iSCSI enhancements
NEW

Thin Provisioning for virtual disks

VMFS Volume Grow
vStorage APIs for Data Protection

VMFS
CURRENT

Consolidated Backup

10
 vCompute vStorage vNetwork

Enhanced Multipathing with

Pluggable Storage Architecture (PSA)
 Storage Array Type Plugins (SATPs)
handle path failover, monitors path
health, and reports changes to NMP.
 Path Selection Plugins (PSPs)
choose the best path.

SATP PSP VMkernel

NMP PSA Storage Stack

HBA 1 HBA 2

11
 vCompute vStorage vNetwork

vStorage APIs for Multipathing

Pluggable Storage Architecture (PSA)

VMware NMP

VMware SATP VMware PSP

Third-Party Third-Party
MPP MPP VMware SATP VMware PSP

VMware SATP VMware PSP

Third-Party SATP Third-Party PSP

For unique performance To accommodate For more complex

and fault-tolerance specific storage I/O load balancing
behavior arrays algorithms

12
 vCompute vStorage vNetwork

Updated iSCSI Stack

Significant performance improvements

No longer requires service console connection to communicate
with an iSCSI target
New iSCSI initiator features
Host Configuration > Storage Adapters >
Properties

13
 vCompute vStorage vNetwork

New iSCSI Initiator Configuration Options

Improved security Performance fine-tuning

14
 vCompute vStorage vNetwork

vStorage Thin Provisioning

Virtual Disks

160GB
40GB Allocated
20GB 20GB
20GB 40GB 100GB
Thick Thin Thin

Datastore

100GB
80GB Capacity
60GB

Used 20GB

15
 vCompute vStorage vNetwork

Thin Disk Provisioning Operations

A thin-disk option is
Create New Virtual
available when you:
Machine Wizard
Create a virtual machine
Clone to a template
Clone a virtual machine
Migrate virtual machine
storage (Storage VMotion)

Clone and Migrate Virtual

Machine Wizards

16
VMFS Volume Grow Option

Add Extent Volume Grow

Volume Grow expands an extent so that it fills the available

adjacent capacity.
Single partition provides improved virtual machine availability
Can grow a volume any number of times up to size for a VMFS
volume
Must grow LUN backing VMFS datastore first
Extent immediately after must have free space in LUN

17
vStorage APIs for Data Protection

Physical Server or VM
Backup Application
(Windows or Linux)
vStorage APIs for
Data Protection

Backup Centralized
Proxy Server Data Mover

Snapshots Mount

SAN Storage

18
Features in vStorage APIs for Data Protection

Includes All VCB features

Also supports:
All storage architectures for backup and restore, LAN and SAN
Full, incremental, and differential file-level backup options
File-level backup and restore
Windows and Linux guests
Snapshots and Volume Shadow-Copy Service Quiescing

19
vSphere 4.0 Infrastructure Services: vNetwork
VMware vSphere™ 4.0

Infrastructure
vCompute vStorage vNetwork
Services

IPv6 support
NEW VMDirectPath I/O
vNetwork Distributed Switch
Third-party distributed virtual switches
CURRENT

vNetwork virtual switch

20
IPv6 Support

Successor to IPv4
128-bit addresses (vs. 32-bit in IPv4)
Link-local addresses that appear as the interface is initialized
Addresses set by router advertisements
Ability to have multiple IPv6 addresses on an interface
Supported Components
Virtual machines (as of ESX 3.5)
VMware Tools to display addresses in vCenter Server
Service console
VMkernel
vSphere Client connection to vCenter Server not supported

21
 VMDirectPath I/O
I/O Device Driver Directly Accesses Physical Device
Full network support with:
Intel 82598 10 Gigabit Ethernet Controller
Broadcom 57710 10 gigabit network adapter
Experimental storage I/O device support with:
QLogic QLA25xx 8Gb Fibre Channel
LSI 3442e-R and 3801e (1068 chip based) 3Gb SAS
adapters
Each virtual machine can connect to up to two
Virtualization passthrough devices
Layer Increases performance but trades off losing several
virtualization features
I/O MMU VMotion, Hot add/remove of virtual devices, Suspend and
Resume, Record and Replay, Fault Tolerance, High
Availability, Memory Over-commitment and page sharing
I/O Device

22
 Standard Switch Architecture

Network configuration at
the host level

Service
Console
vNICs
VMotion Port VM Port Group VMotion Port VM Port Group COS Port
Port Groups
vSwitches
Virtual
Physical
Physical NICs

Physical
Switches
ESXi Host 1 ESX Host 2

23
 Distributed Switch Architecture

Distributed
Port Groups VMotion Virtual Machines Service Console vCenter
Distributed Server
Switch
(Control Plane)

Service
Console

Hidden
vSwitches
(IO plane)
Virtual
Physical

ESXi Host 1 ESX Host 2

24
 Third-Party Distributed Switches

vSphere Client vNetwork Appliance APIs allow

third-party developers to create
Plug-In distributed switch solutions.

vCenter Server
DB Control Plane vCenter Server
Extension

Virtual Control Plane

Appliance

ESX Agent Agent ESX

IO Plane IO Plane

25
Benefits of Distributed Switches

VMware VMware
Infrastructure 3 vSphere 4

vNetwork Distributed Switches…

Simplify datacenter administration
Enable networking statistics and policies to migrate with
virtual machines (Network VMotion)
Provide for customization and third-party development

26
vSphere 4.0 Application Services: Availability
VMware vSphere™ 4.0

Application
Availability Security Scalability
Services

Enhanced VMotion compatibility

Storage VMotion enhancements
NEW

VMware HA enhancements
VMware Fault Tolerance
VMware Data Recovery

VMware HA
CURRENT

VMotion
Storage VMotion
NIC/HBA teaming

27
 Availability Security Scalability

Enhanced VMotion Compatibility (EVC)

CPU Baseline Feature Set

CPUI
D

CPUI CPUI
CPUI
D D D K…

X… X… X…

EVC Cluster
EVC prevents migrations
with VMotion from failing
due to incompatible CPUs.

28
 Availability Security Scalability

EVC Cluster Requirements

Hosts
CPUs from a single vendor, either Intel or AMD
Running ESX Server 3.5 Update 2 or later
Connected to vCenter Server
Hardware virtualization support (AMD‐V or Intel VT) enabled
AMD No eXecute (NX) or Intel eXecute Disable (XD) technology
enabled
Support hardware live migration (AMD-V Extended Migration or
Intel FlexMigration) or have baseline processor of intended feature
set
Virtual Machines
Powered off or migrated out of cluster when EVC is enabled
Applications on virtual machines must use CPUID instructions

29
 Availability Security Scalability

Storage VMotion in vSphere 4

Enhancements
Can administer via vSphere Client
Supports NFS, Fibre Channel, and iSCSI
No longer requires 2 x memory
Supports moving VMDKs from thick to thin
formats
Can migrate RDMs to RDMs and RDMs to
VMDKs (non-passthrough)
Leverages new vSphere 4 features to speed
migration

Limitations
Virtual machine cannot include snapshots
VM must be powered off to simultaneously
migrate both host and datastore

30
 Availability Security Scalability

Storage VMotion in vSphere 4

4. Invoke fast suspend/resume
on virtual machine

3. “Pre-copy” virtual machine’s

2. Enable changed block tracking disk and swap file from source
on the virtual machine’s disk to destination

2 5 3
1

Source Destination
5. Remove source home and
1. Copy virtual machine files
disks of virtual machine
except disks to new datastore

31
 Availability Security Scalability

New HA Cluster Settings

Ability to suspend
host monitoring

Choice of three
admission control
strategies

32
 Availability Security Scalability

VM Monitoring

Enable automatic
restart due to failure of
guest operating system

Determine how quickly

failures are detected

Set monitoring sensitivity

for individual virtual
machines

33
 Availability Security Scalability

VMware Fault Tolerance (FT)

vLockstep Technology vLockstep Technology

Primary Secondary New

New Secondary
Primary

VMware FT provides zero-downtime, zero-data-loss

protection to virtual machines in an HA cluster.

34
 Availability Security Scalability

How VMware FT Works

Primary Secondary
Virtual Machine Virtual Machine

VMkernel VMM VMM VMkernel

Log Update? Log Read?
Record Logs
Log Buffer Log Buffer
Heartbeat?

Read/Write Read

Single Copy of Disks on Shared Storage

35
 Availability Security Scalability

Enable Fault Tolerance with a Single Click

Primary Virtual Machine >
Summary Tab

After you turn on Fault Tolerance,

the Status tab on the primary
virtual machine shows Fault
Tolerance information.

36
 Availability Security Scalability

VMware Data Recovery

VMware’s Backup/Recovery
Solution based on APIs for
Data Protection
Agentless disk-based backup
and recovery
De-duplication and incremental
backups to save disk space

37
 Availability Security Scalability

VMware Data Recovery Key Components

vCenter Plug-in
> With vSphere Client plug-in, allows configuration
and management of backup/recovery appliance
> Wizard driven backup and restore job creation
vCenter Server Data > Storage of backup configuration in vCenter Server
Recovery
database and awareness of HA/VMotion/DRS
Virtual Machines Backup and Recovery Appliance
> OVF appliance
> Leverages vStorage APIs for Data Protection to
VMware ESX/ESXi discover, manage backup and restore

Servers
VMware ESX/ESXi
> Provides VSS support
> Change block tracking functionality allows backups to be
more efficient
Storage
Storage
> Any VMFS storage: DAS, iSCSI or Fibre Channel
storage plus NFS and CIFS shares as target
> All backed up virtual machines are stored on disk
in a deduplicated datastore

38
vSphere 4.0 Application Services: Security
VMware vSphere™ 4.0

Application
Availability Security Scalability
Services

VMware VMsafe
NEW

VMware vShield Zones

CURRENT

Thin ESXi hypervisor with locked-down interfaces

No dependence on general-purpose OS

39
 Availability Security Scalability

VMware VMsafe

API that enables protection of VMs

by inspection of virtual components
in conjunction with hypervisor
Isolation of protection engine from
malware
Broad ranging coverage of virtual
machine CPU, memory, storage and
network

Application

Operating System
Protection Engine

VMware vSphere™

40
 Availability Security Scalability

vShield Zones
Capabilities
Bridge, firewall, or isolate VM zones
based on familiar VI containers
Monitor allowed and disallowed activity
by application-based protocols
One-click flow-to-firewall blocks precise
network traffic

Benefits
Well-defined security posture within
virtual environment
Monitoring and assured policies, even
through Vmotion and VM lifecycle
events
Simple zone-based rules reduces policy
errors

41
 Availability Security Scalability

VMware vShield Zones Architecture

vShield Host Gateway vShield Manager

Virtual Network Monitoring Centralized Monitoring
Virtual Network Firewall Centralized Policy Assignment
Transparently Managed Web-based interface

VMware
VMware vShield vShield vShield
vShield
vCenter Manager
VMware ESX VMware ESX VMware ESX

42
vSphere 4.0 Application Services: Scalability
VMware vSphere™ 4.0

Application
Availability Security Scalability
Services

Increased host scalability

8-way SMP and 255 GB of virtual machine RAM
NEW
Hot add of virtual CPU and memory
Hot plug devices
Hot extend of virtual disks
CURRENT

DRS shares and reservations allow apps to

shrink and grow based on priority

43
 Availability Security Scalability

Host Scalability

Enhanced performance and

App App
App App
App App App App
AppApp App
App higher consolidation rates
OSOSOS
OSOSOS
256192
VMs OSOSOS
OSOSOS
VMs 64-bit VMkernel
512GB host memory
64 logical CPUs
256 virtual machines per host

64 Cores
32 512GB
256 GB
Cores

44
 Availability Security Scalability

Virtual Machine Scalability

Dynamic scale-up supports

much larger workloads
8-Way Virtual SMP
256GB RAM
Virtual Machine Hardware
App 256 GB Version 7
App
New virtual devices
OS
OS 8 CPUs
VMDirectPath I/O
Hot plug support

45
 Availability Security Scalability

Hot Add for Memory and CPU

Virtual Machine > Edit Settings >
Options Tab > Memory/CPU Hotplug

You must enable Memory and

CPU Hot Add so that the
options are available on the
Hardware tab.

46
 Availability Security Scalability

Hot Adding and Removing PCI Devices

Virtual Machine > Edit Settings >

Hardware Tab > Add

You can hot-add/remove:

 Network cards
 SCSI adapters
 Sound cards
 SCSI disks and CDROMs
 USB EHCI controller
 VMCI
 PCI passthrough devices

47
 Availability Security Scalability

Hot Extending VMDKs

Virtual Machine > Edit Settings >

Hardware Tab

48
 vCenter Server 4 Highlights

Increased Scalability  vCenter Server Linked Mode

 vCenter Orchestrator
Streamlined  Host Profiles
Management  vApps
 Centralized licensing
 vCenter Server plug-in updates
Resource Management  Performance Charts Enhancements
 Storage Awareness Enhancements

49
vCenter Server Linked Mode Overview

Standard vSphere Client

can access inventory
across multiple vCenters
View and search across
combined inventory of
a group of vCenter
Servers
Shared roles and
license configurations

50
 vCenter Server Linked Mode Architecture

vSphere Client

vCenter Tomcat vCenter Tomcat vCenter Tomcat

Server Web Service Server Web Service Server Web Service

ADAM Instance ADAM Instance ADAM Instance

vCenter Server Instance vCenter Server Instance vCenter Server Instance

Connection information
Certificates and thumbprints
Licensing information
User roles

51
vCenter Orchestrator

Use Orchestrator to create and execute workflows that

automate virtual infrastructure management processes

Client Configuration Web Service

Workflow Engine
vCenter Third-Party Workflow
XML SSH … Library
Server Plugin

52
 Host Profiles Overview

Host profiles reduce setup time and

allow you to manage configuration
consistency and correctness.

Reference Host

Cluster

53
Basic Workflow to Implement Host Profiles
Host Profile 2
Memory Reservation
Storage
Networking
Date and Time
4
Firewall
Security 3
Services
Users and User Groups
Security

1 Reference Host Cluster

54
Working with Host Profiles

After you create the profile, attach it

to hosts/clusters so that you can
check compliance and apply it to
hosts not in compliance.

55
 vApp Overview

vApps are multi-tier application services that you can

manage as a single inventory item.
Provides for single-step
management vApp
Eliminates complex setup App Server App Server Database
and configuration
VM VM VM

OVF Descriptor

Resource Pool

Distributed Virtualization Layer

56
 Deploying vApps
 File > Deploy OVF Template
 File > Browse VA Marketplace

vApps from ISVs may include

additional settings to configure.

57
 Simplified License Management in vSphere 4
Simple license keys instead of flex
1 license per edition
1 key for many hosts
New centralized license key administration in vCenter
No separate license server to manage or monitor
Centralized host and license monitoring through vCenter enabling easy compliance
New license portal provides more accurate view of entitlement

58
 Managing Licenses in vSphere 4
Administration > Licensing

Manage licenses

Export report

Key is a string, not a text file Custom label

59 59
 vCenter Server Plug-in Enhancements

Lower overhead and More platforms Enhanced management

better scalability supported and administration
Modular plugin Ability to convert to new ESX/ESXi hosts and
Analyzes up to 500 platforms supported in virtual appliance
physical machines at a ESX/ upgrades
time ESXi 4.0 Baseline groups
Support for Windows Compliance dashboard
Server 2008 as source
and platform Patch staging

Convert Microsoft Hyper-V

VMs to VMware VMs

60
 New Performance Charts

Thumbnail Views
Performance overview charts help
to quickly identify bottlenecks and
isolate root causes of issues.

61
 New Storage Views Tab Adds Insight into
Storage Infrastructure

The new Storage Views tab provides

greater insight into capacity utilization
and storage connectivity.

62
Maps View

LUN

Target HBA

63
Enhanced Views for Storage Devices
Host Configuration >
Right-click to rename Storage > Devices

Unique LUN identifier is

persistent across reboots.

64
 VMware vSphere™ Integrates with Solutions
from Leading Partners
Firewall
Clustering Anti-virus Dynamic Resource
Data Protection Intrusion Prevention Sizing
Intrusion Detection

Application
Services Availability Security Scalability

vSphere 4.0

vCompute vStorage vNetwork

Infrastructure
Services

Storage
Hardware Assist
Management
Enhanced Live & Replication Network
Migration Management
Storage Virtual
Compatibility
Appliances

65
 Summary of VMware vSphere™
vApp

vCenter Suite

Availability Security Scalability

VMotion
Application Storage VMotion
vShield Zones DRS
Services HA
VMSafe Hot Add
Fault Tolerance
Data Recovery

vCompute vStorage vNetwork VMware

VMFS vSphere™ 4.0
Infrastructure ESX Thin
ESXi Provisioning Distributed Switch
Services DRS/DPM VMFS Volume
Grow

Internal Cloud External Cloud

*Note vCenter Server and its components are a separate purchase
66
What’s New in vSphere 4.0:
Technical Overview
Backup Slides
 Guest Operating System Support

Support for over 45 guest operating systems

New in vSphere 4
Asianux 3.0 OS/2 OpenServer 5
CentOS 4 MS-DOS 6.22 Unixware 7

Debian 4 Windows 3.1 Solaris 8 (experimental)

FreeBSD 6 Windows 95 Solaris 9 (experimental)

Solaris 10
FreeBSD 7 Windows 98

69
VMware Solution Compatibility
• vSphere 4.0 is a major new release that will require updates to
most current VMware add-on products
• Most products will release updates that will provide vSphere
4.0 compatibility in 2H 2009
• Customers will still receive VI3 licenses for most bundles
containing not-yet-compatible products, but can
upgrade/downgrade their license keys at any time

Compatibility with vSphere 4

Compatible with vSphere 4 at GA planned for 2H 2009
vCenter Heartbeat VMware View
VMware Capacity Planner vCenter Site Recovery Manager
Converter 4.0 vCenter Lifecycle Manager
vCenter Stage Manager
vCenter Lab Manager

70
 vCompute vStorage vNetwork

Additional New vStorage Features Summary

Optimized Storage Capabilities

SCSI-3 Compliant MS Server 2008 Failover
Modular Pluggable Storage Clustering support
Architecture (PSA) Persistent reservations in
VMkernel
Updated iSCSI stack
Native SATA support LSI Logic SAS (virtual SAS
controller)
New storage virtual devices
Paravirtual SCSI adapter
IDE virtual device

71
Additional New vNetwork Features Summary

Improved performance and extended support

Tcpip2 VMXNET3
Based on FreeBSD 6.1 MSI/MSI-X support
Supports IPv6 Receive side scaling
Improved locking and threading IPv6 checksum and TSO over
capabilities IPv6
Loads by default VLAN offloading
Tcpip2v6 loads when IPv6 is
enabled

72
Ensure Availability for the
vCenter Server Platform
vCenter Server Heartbeat
Protects the mission critical
functionality of VMware
vCenter
Proactive identification and
resolution of threats to
vCenter Server availability
Protects vCenter Server
against hardware, OS,
network, application failures
and configuration errors

* Licensed Separately

73