1. A Combat Support Agency Defense Information Systems Agency Virtualization 17 August 2011

2. A Combat Support Agency Why Virtualize? Why is there so much hype about virtualization, and now “Cloud Computing?” 1)Because it does really cool things, and 2)Because it does vitally important, boring things Another way to phrase these statements is: 1)Because we want to, and 2)Because we have to 2

3. A Combat Support Agency Why We Want to Virtualize Separates the Operating System from the physical hardware –Live migration from one physical server to another –Live migration from one storage medium to another –Develop on a $500 desktop that looks 100% equivalent to a $20,000 server –Package and ship the server as a file to the DECC to be imported and STIG’d 3

4. A Combat Support Agency Why We Want to Virtualize Gives smaller workloads enterprise hardware and capabilities –Massive redundancy (power, network, storage, etc.) –Nearly limitless growth –Eliminates protracted outages due to hardware failure Fast provisioning –No need to keep racks of spare servers available –Capacity on hand to provision moderate workloads at will 4

5. A Combat Support Agency Why We Have to Virtualize Nearly all of the workloads running in the DoD cannot fully utilize the hardware they are provided. Convergence of 3 factors –Separation of server functions into separate operating systems –Inability of non-concurrent, 32-bit applications to use resources –Physics of processor design 5

6. A Combat Support Agency Separation of Functions Originally purchased a server to run the full stack of an application Then a single server produced management and scalability issues Finally, a single server caused security risks End result, nearly all functions are split amongst different tiers of servers 6

7. A Combat Support Agency Inability to Use Resources Splitting the functions up on different servers may have improved performance Applications use same resources they used before, but the OS does not have to track the different workloads Most servers are 1 or 2 CPU running non-concurrent, 32-bit applications Subsequent hardware upgrades provide faster and faster processors which results in near linear performance improvements Until 2005… 7

8. A Combat Support Agency Physics of Processors Intel and AMD begin releasing dual-core processors Dual-core processor is 2.66ghz, not 5.32ghz Microsoft and Oracle effectively ignore cores Moore’s Law – Number of transistors on a processor doubles every 2 years Speed of processors doubling every 2 years is not Moore’s Law, but is effectively true until 2005 8

9. A Combat Support Agency Why We Have to Virtualize Nearly all x86 workloads are: –Non-concurrent –32-bit based –Separated at the OS level by function Smallest physical server available with a fast processor is 12-cores (2 CPU with 6 cores per CPU) and 8GB of RAM The best a non-concurrent, 32-bit application can use of this server is 8.3% of CPU and 20% of RAM x86 Virtualization came to prominence in roughly 2005 9

10. A Combat Support Agency How Does CSD Virtualize UNIX –HP-UX – Integrity Virtual Machines –Solaris OLTP – Oracle VM Server for SPARC (Ldoms) –Solaris Other – Limited use of Zones/Containers x86 –Currently: – VMWare vSphere ESX –HP 2 socket servers (BL490c and DL380) 10

11. A Combat Support Agency x86 Virtualization Built for robust, consistent operation of nearly all workloads –One type of server –One type of storage –Redundancy everywhere possible –Sustain the loss of a single host within a cluster without disruption Provisioning is at 1 vCPU and 2GB of RAM –Servers are grown dependent upon usage –Most resources can be added while the server is running 11

12. A Combat Support Agency The State of x86 2100+ Virtual Operation Environments (VOEs) 257 VMWare vSphere 4.0 ESX Hosts in Operation 41 Clusters around the world 400+TeraBytes of DataStores Size Distribution of VOEs: 12 vMemory: <2GB – 50% 2-4GB – 41% >4GB – 9% vCPU: 1 – 55% 2 – 44% >2 – <1%

14. 2 A Combat Support Agency 14 Backup Slides

15. 2 A Combat Support Agency The speed of an x86 processing core has not increased since 2005. Source: http://www.gotw.ca/publications/concurrency-ddj.htm

16. 2 A Combat Support Agency August-2010September-2010October-2010November-2010December-2010January-2011 ModelCPU %Mem %CPU %Mem %CPU %Mem %CPU %Mem %CPU %Mem %CPU %Mem % PROLIANT BL460C0.2222.5210.1521.5840.2321.1660.2722.5980.4122.152.1124.874 PROLIANT BL460C1.3249.9650.5238.8860.6234.9170.6631.370.6038.150.6352.443 PROLIANT BL460C13.7856.60613.0355.50813.0945.28213.1835.25913.0853.43513.1151.506 PROLIANT DL380G60.3221.5940.5717.3951.4926.8680.8123.9440.8926.7920.6127.484 PROLIANT DL380G60.3521.4590.4717.8880.6820.1160.7319.2830.6319.1170.9525.23 PROLIANT DL380G60.3220.2860.7817.2190.6520.3960.7919.610.5219.4080.5120.271 PROLIANT DL380G60.0814.9590.1413.0260.2316.7120.2016.330.2020.3650.2025.273 PROLIANT BL460C8.3417.9828.3418.2858.3419.2630.7119.3530.1521.3520.0220.904 ProLiant BL460c G12.0811.1781.9513.6582.0014.7661.9912.8031.9113.0641.8713.082 PROLIANT BL460C0.5517.2790.5318.1440.5418.5350.5319.620.4919.330.4719.105 PROLIANT BL460C0.6712.4350.7313.6431.1420.1161.2214.1964.3417.6021.7315.624 PROLIANT BL460C0.4312.0180.7613.2590.4211.5390.4211.5390.4211.5390.9712.133 PROLIANT BL460C0.3512.0450.2911.0530.3710.6910.4411.5560.5611.6670.9911.845 PROLIANT BL460C4.7931.2946.4333.3517.2331.2325.4929.7246.7032.0856.9631.12 PROLIANT BL460C1.9238.4782.9248.68811.0045.478.4643.844.7342.122.5142.219 PROLIANT BL460C4.9140.40511.3343.44310.5941.27710.5139.5374.7541.9695.1240.468 PROLIANT BL460C7.8141.8121.8942.5187.5245.221.9142.4051.7140.3571.6339.468 PROLIANT BL460C0.8516.1330.9118.4040.8920.5830.9116.240.8716.150.8615.785 ProLiant BL460c G11.00350.6328.8070.6811.3510.6412.0090.7510.7830.8911.163 ProLiant BL460c G10.9634.880.7037.1980.6827.7960.6613.350.8312.524.0710.646 ProLiant BL460c G10.926.5350.826.4760.837.4360.826.4760.837.4361.1812.475 ProLiant BL460c G10.906.6760.846.3741.469.1731.019.4970.976.8960.856.665 ProLiant BL460c G10.866.6791.027.5630.846.3460.836.9310.897.6451.418.809 ProLiant BL460c G10.969.6330.888.2951.2110.7971.1213.2181.0412.4340.859.034 ProLiant BL460c G11.248.4820.768.2190.968.3350.968.3350.938.4091.157.993 PROLIANT BL460C0.6913.1960.6313.3220.6913.1820.6313.3220.6913.1820.8213.921 PROLIANT BL460C0.7811.6311.1112.2120.6712.1520.6712.3410.7112.4670.6014.801 PROLIANT BL460C1.1632.610.9744.2241.3846.1465.2284.6736.0377.8075.7867.043 PROLIANT BL460C1.4856.1263.8768.562.6373.5011.0137.9940.7837.7033.1027.141 PROLIANT BL460C0.6314.9120.6017.2550.7819.1480.8220.0560.7819.1480.8220.056 PROLIANT BL460C0.6014.330.6011.5360.7511.9260.7511.9260.5712.5760.5813.107 PROLIANT BL460C0.6112.1520.5512.7250.6212.540.5512.7250.6212.540.6213.381 PROLIANT BL460C0.7011.9620.6413.3670.7015.4490.7213.3220.7512.6320.7614.26 PROLIANT BL460C3.7041.6686.2646.6825.6242.5667.3145.1796.7443.8877.9049.247 ProLiant BL460c G10.8239.5080.7742.1020.9240.5691.4044.2181.2744.8321.2843.287 ProLiant BL460c G15.2324.4164.8127.1894.7227.1225.3623.5375.5125.0655.4325.596 PROLIANT BL460C0.052.0920.132.4360.603.2960.743.8840.284.1990.717.008

17. 2 A Combat Support Agency ProLiant BL460c G17.5265.6716.6854.1667.0262.8447.5160.5447.3461.6266.8657.368 ProLiant BL460c G111.9346.5046.7325.8076.2125.846.2125.849.2023.4287.7423.685 ProLiant BL460c G14.5411.5064.9411.2125.7911.3695.5111.3654.8111.6376.5411.542 ProLiant BL460c G12.9225.5662.6919.8970.6414.3583.2617.7942.5720.5413.1421.831 ProLiant BL460c G17.1747.1586.6853.5397.1252.1715.0928.0354.7830.6927.3746.711 ProLiant BL460c G110.9445.9128.0734.7438.7729.63216.6970.92517.7575.6418.7052.709 ProLiant BL460c G13.0534.2792.9736.82.8239.2082.8329.1122.8329.1122.3927.818 ProLiant BL460c G13.9025.5551.1120.0151.5215.442.6520.8432.6423.7612.6524.091 ProLiant BL460c G13.3945.6293.5248.7443.3647.5213.9750.083.9750.083.4641.189 ProLiant BL460c G11.9741.4672.3847.6122.2142.4692.3442.3822.1141.3131.9542.739 ProLiant BL460c G11.5836.1341.6337.6971.6135.0741.6137.561.6137.561.5336.177 PROLIANT BL460C1.0714.071.1713.3871.2613.3211.6113.5921.3413.6581.1912.953 ProLiant BL460c G13.7611.5152.9111.2452.7311.3133.0612.1732.6912.1082.2411.426 ProLiant BL460c G19.3138.6359.5535.27810.3936.64810.6942.0789.1135.04610.6437.425 ProLiant BL460c G12.2035.3792.6860.6112.3759.0962.4359.9121.9661.7982.3253.799 ProLiant BL460c G12.7324.1322.7623.7662.8123.8552.6924.9831.8825.831.8825.83 PROLIANT BL460C0.6316.3743.0024.9033.5832.1023.3232.3184.9341.3065.2742.561 PROLIANT BL460C12.4773.0446.8066.2157.3554.8632.1462.699.0442.2659.6641.496 PROLIANT BL460C3.2568.3225.7367.2712.9959.7213.6962.8651.3332.0662.4463.472 PROLIANT DL380G60.2321.1250.2021.2410.1921.6430.1821.6050.2220.0970.1921.615 PROLIANT BL460C0.5727.1640.5027.7710.5528.8770.5429.0090.5329.6850.5232.717 PROLIANT BL460C4.5226.5658.8528.0170.7523.7931.5728.9620.7822.6780.5320.062 PROLIANT BL460C0.5722.4350.5623.630.6022.7830.6327.6740.6125.5070.5622.158 PROLIANT BL460C0.5524.0050.5423.9880.6122.8720.6125.2130.5924.4360.5621.777 ProLiant BL460c G11.89231.7723.9181.7424.5841.7822.4671.8521.6761.9622.584 ProLiant BL460c G11.0042.7110.9359.0211.0954.641.1637.4721.4458.5531.3753.136 ProLiant BL460c G11.0955.5470.6337.1910.8243.3821.0757.6530.9528.7580.9036.152 PROLIANT BL460C1.8720.5381.7821.0651.9120.4710.5612.6851.3221.8051.4223.561 PROLIANT BL460C1.1133.6660.8933.4841.2633.8911.0032.4181.0931.6230.4324 PROLIANT BL460C1.1133.2040.9133.4451.2732.8610.9534.0331.1932.1480.6926.679 PROLIANT BL460C0.8435.9730.8532.4151.1534.2810.9033.4381.1233.4961.1233.592 PROLIANT BL460C1.4619.5464.5420.09214.8518.2120.3715.4611.2558.5151.1730.307 PROLIANT BL460C1.3017.6913.9317.9045.2417.0710.5115.5221.0031.4461.1834.46 PROLIANT BL460C1.0336.4370.6636.4751.1636.8570.7137.9121.1035.3810.9736.41 PROLIANT BL460C1.1432.9410.9533.3641.2032.6980.7630.8511.2739.2841.2941.338 PROLIANT DL380G66.4922.5586.5023.0536.4922.626.5021.466.4921.4949.2721.713

18. 2 A Combat Support Agency