Huawei FusionCloud Desktop Solution 3.0 Efficient ... 3.0 Efficient Operation and Maintenance White Paper ... using PXE Virtual machine ... Uses proactive monitoring modes based on

Huawei FusionCloud Desktop Solution 3.0 Efficient Operation and Maintenance White Paper

Issue 1.1

Date 2014-02-08

HUAWEI TECHNOLOGIES CO., LTD.

Issue 1.1 (2014-02-08) Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd

i

Copyright © Huawei Technologies Co., Ltd. 2009~2012. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior

written consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.

All other trademarks and trade names mentioned in this document are the property of their respective

holders.

Notice

The purchased products, services and features are stipulated by the contract made between Huawei and

the customer. All or part of the products, services and features described in this document may not be

within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,

information, and recommendations in this document are provided "AS IS" without warranties, guarantees or

representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base

Bantian, Longgang

Shenzhen 518129

People's Republic of China

Website: http://www.huawei.com

Email: [email protected]

http://www.huawei.com/

mailto:[email protected]

Desktop Cloud Solution Efficient Operation and

Maintenance White Paper Contents



ii

Contents

1 Efficient Operation and Maintenance (O&M) Scenarios of Desktop Cloud .................... 1

1.1 Overview of Efficient O&M Scenarios ............................................................................................................ 1

1.1.1 Comparison of Cloud O&M Among Different Players ........................................................................... 1

1.1.2 O&M of Cloud Platform ......................................................................................................................... 1

1.1.3 Cloud Desktop Software O&M ............................................................................................................... 2

1.1.4 O&M of Cloud Terminals ....................................................................................................................... 2

1.1.5 Cloud Service O&M ............................................................................................................................... 3

1.2 O&M of Cloud Platform .................................................................................................................................. 3

1.2.1 Remote Hardware O&M Scenario and Case Study ................................................................................ 3

1.2.2 Proactive Monitoring Solution ................................................................................................................ 5

1.3 O&M of Cloud Desktop Software .................................................................................................................... 7

1.3.1 Automatic Distribution and Upgrade of Desktop VDA .......................................................................... 7

1.3.2 Windows OS Automatic Distribution ...................................................................................................... 9

1.3.3 Automatic PVDriver Upgrade ............................................................................................................... 10

1.4 O&M of Cloud Terminals .............................................................................................................................. 11

1.4.1 O&M of TCs ......................................................................................................................................... 11

1.5 O&M of Cloud Service .................................................................................................................................. 14

1.5.1 Remote Efficient Management of the WEB Mode ............................................................................... 14

1.5.2 Authority and Domain Based Management .......................................................................................... 16

1.5.3 Automatic Service Provisioning e-Flow ............................................................................................... 17

1.5.4 Resource Sharing of Meeting Rooms or Personnel on Business Trips ................................................. 19


Maintenance White Paper

1 Efficient Operation and Maintenance (O&M) Scenarios of

Desktop Cloud



1

1 Efficient Operation and Maintenance (O&M) Scenarios of Desktop Cloud

1.1 Overview of Efficient O&M Scenarios

1.1.1 Comparison of Cloud O&M Among Different Players

Item Huawei Citrix VMWare

Large cluster A maximum of 512

servers

A maximum of 16

servers

A maximum of 8

servers

Management

console

Unified management

interface

XenCenter multiple

consoles

vCenter multiple

consoles

Platform

deployment mode

Management Node (MN)

Unified installation and

deployment

automatic loading and

automatic configuration

by using of Management

Nodes (MNs)

Manual installation

and configuration by

using Preboot eXecute

Environment (PXE)

Manual

installation and

configuration by

using PXE

Virtual machine

driver upgrade

Automatic pop-up

prompt and upgrade by

using PVDriver

Manual upgrade by

using xen tools

Batch upgrade

by using Update

manager

Service

provisioning

Process-based and

automatic

Manual Manual

1.1.2 O&M of Cloud Platform

O&M Scenario Description

Hardware platform

management

The hardware platform is installed and deployed in a unified manner,

and is automatically loaded and configured by using MNs.




Desktop Cloud



2


Automatic

monitoring

The O&M function is required to implement all-round monitoring

and connect the cloud platform to network management systems

(NMSs) of enterprises or carriers.

1.1.3 Cloud Desktop Software O&M


Operating system

(OS)

The OS is quickly copied by using unified image files. On traditional

PCs, the OS installation takes least 30 minutes.

OS patch The OS patches are managed by Windows Server Update Services

(WSUS) in a centralized manner.

Desktop security

software

The security software is uniformly and automatically upgraded on

servers

Cloud related

software: VDA

The terminal security management (TSM) push mode is supported

and silent installation is performed after a restart

Cloud driver:

PVDriver

The software supports automatic pop-up management and silent

installation

Universal service

software

The software is distributed using TSM software. Its upgrade is

similar to VDA upgrade, but supports online upgrade management

1.1.4 O&M of Cloud Terminals


Centralized patch

management

The O&M function is required to support TCM remote scan and

push patches in batches

Remote fault

location

The O&M function is required to remotely control screens of thin

clients (TCs) for troubleshooting




Desktop Cloud



3

1.1.5 Cloud Service O&M


Service provisioning

automation

Service provisioning is verified and approved with one click, and

the background automatically distributes resources.

Web-based

self-service for users

A user interface is provided, shielding bottom-layer functions

Meeting

rooms/personnel on

business trips

VM resource pool is shared, and service provisioning is withdrawn

without administrator.

1.2 O&M of Cloud Platform

1.2.1 Remote Hardware O&M Scenario and Case Study

Scenario Analysis

Scenario Description

Storage hard disk

replacement

Remote server

installation

MN loading configuration: A board is automatically loaded and

configured after being inserted.

BMC out-of-band management: This function allows you to control

the equipment room without stepping into it.

Solution Description

Figure 1-1 shows the storage hard disk replacement procedure that greatly shortens fault

recovery time.




Desktop Cloud



4

Figure 1-1 Storage hard disk replacement procedure

Automatically report

monitor alarms.Sign on ISM portal.

Locate the faulty

disk sot.

The faulty disk

identifies faults.

A red LED of the hard

disk is on.

Remove and replace the

hard disk.

Frontline

personnel/equipment room

security guard

The hardware

replacement is

finished.

Remote O&M

personnel

Figure 1-2 shows the remote server installation procedure, which allows you to remotely

locate faults and re-distribute resources.

Figure 1-2 Remote server installation procedure

A red LED is on, when a

board is faulty.

Remotely sign on BMC.

Collect hardware log

location.

Administrator

Remove and replace the faulty board.

Frontline

personnel/security

guard

The MN delivers policies.

Sign on MN portal.

The loading configuration is finished.




Desktop Cloud



5

Implementation

Desktop clouds of Huawei Shanghai office are all maintained remotely supported by a

proactive monitoring solution and remote hardware O&M.

1.2.2 Proactive Monitoring Solution

Scenario Analysis

The monitoring capability reflects the fault identification, handling and recovery capability of

a system. It is an important part of the O&M.


The monitoring solution for Huawei Shanghai office is as follows:

Uses proactive monitoring modes based on availability monitoring and performance

monitoring. This is independent from the system, thereby helping identify faults in time.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

35pt

32pt

) :18pt

Page 1

Availability

monitoringserver

Equipment room device monitoring:

temperature, power and air-condition

Hardware device: network, server and storage

Sensor

SNMP and IPMI

OS: Hypervisior and Windows2003 Monitoring agent

Application service: interface and connectivity Ping and telnet

Visualization

monitoringserver

Whatsup software,

connectivity and

SNMP

Proactive

monitorThe duration is

5 minutes.

Performance

monitoringserver

Network device: network traffic, delay and

packet loss rate

Storage device: network traffic, delay and

input/output operation per second (IOPS)

OS: CPU, memory and hard disk usage Monitoring agent

SNMP

SNMP

Email

Monito

ring

pers

onnel

O&

M

pers

onnel

Voice

Event

Text

message

PhoneFault location

The monitoring solution for Shanghai branch of China Unicom is as follows:

VMs, storage devices, and TCs are monitored by the NMS. Storage devices and VMs provide

SNMP interfaces for monitoring purpose. TCs connect to the database of the TCM server,

which provides real-time monitoring results and visualized monitoring interface.




Desktop Cloud



6

Integrated network

manager of informatization

department

Database interface SNMP interface SNMP interface

TC management

TC TC TC TC

VM management

VM VM VM VM

Storage

management

Storage

server

Storage

server

Storage

server




Desktop Cloud



7

Implementation

The Desktop Cloud solution provides universal network management interfaces, such as

SNMP and IPMI, to interconnect with the NMS of enterprises and carriers for unified

monitoring and troubleshooting.

1.3 O&M of Cloud Desktop Software

1.3.1 Automatic Distribution and Upgrade of Desktop VDA

Scenario Analysis


Automatic VDA upgrade The VDA is an important component of desktop virtualization,

and a must of desktop connection. The desktop remote

connection, desktop display, and audio and video quality

depend on this component. The VDA supports desktop remote

real-time connections; thereby, it does not support hot patches

and cannot be upgraded in a connected state.




Desktop Cloud



8



35pt

32pt

) :18pt

Page 1

VDA, VM Driver Push

TSM/SPES

Server

Agent

VM

Agent

VM

P2P download and

automatic distribution

Set scheduled

tasks by IP

address segment.

8000-10000 VMs

Supports TSM push: uses P2P distribution mechanisms to deliver upgrade packages

Automatically runs scripts: generates scheduled tasks (such as automatically performing

upgrades upon startup)

Notifies users of shutting down VMs after work

Enables the VM shutdown function at midnight

Automatically runs scheduled tasks and the VDA silent upgrade installation script

Automatically restarts VMs after the upgrade is finished

Implementation

The upgrade packages can be pushed by network segment or account.

The VDA upgrade cannot be performed in an ICA connected state and any click cannot be

performed on connected desktops during the upgrade. Therefore, the VDA upgrade must be

performed at night by starting an automatic upgrade policy to increase the success upgrade

rate.

Citrix does not provide any upgrade solution for VDA.




Desktop Cloud



9

1.3.2 Windows OS Automatic Distribution

Scenario Analysis

The Huawei Shanghai office has seven service blocks. (A service block is a logical unit which

each service block supporting a maximum of 2,000 concurrent user VMs.) In the standard

configuration mode, a service block requires 11 VMs, which serve as the fundamental

architecture servers of the service block (1 license server, 6 DDCs, 2 WIs, 1 WLB server, and

1 database). There are about 80 servers running windows 2003. Because these servers are

interdependent, a lot of time and effort are required to install patches on them.


The servers are interdependent to each other; thereby their restart time must be correctly

configured.


35pt

32pt

) :18pt

OS patch installation policy: install and restart standby machines first, then the main server

Page 1

Saturday Automatic

Installation Policy Group

autopatch_sat_servers

China.huawei.com

ServerFarm Server

Sunday Automatic

Installation Policy Group

autopatch_sun_servers

WSUS Server

Lg-upd srv-upd

User-side VM

Automatic Download

Manual Installation

SqlServer

LicenceServer

DDC-Slaver

DDC-VDA2

DDC-XML2

WI2

DSC01 DDC-Master

DDC-VDA1

DDC-XML1

WI1

DSC02

0:00 Saturday 2:00 Saturday 22:00 Saturday 2:00 Sunday 22:00 Sunday

OS Patch Automatic

Distribution Mechanism

Implementation

Before the OS patch automatic installation mechanism is provided, it takes about five minutes

to install patches to a Windows server.

Therefore, it takes 400 minutes to install patches to 80 servers in Huawei Shanghai office.

In addition, it is difficult to ensure that the patches are successfully installed within the

specified period of time.




Desktop Cloud



10

After the OS patch automatic installation mechanism is provided, the WSUS server

automatically installs patches to all Windows servers without any assistance from the user.

1.3.3 Automatic PVDriver Upgrade

Scenario Analysis

The PVDriver is a mandatory driver of a VM. It is used to optimize the performance of VMs,

including the CPU usage, I/O speed, and network-related performance. In the desktop cloud

scenario, many user VMs are used. It is necessary to upgrade the PVDriver automatically.


With the automatic PVDriver upgrade mechanism, the PVDriver on the user VMs are

automatically upgraded after an administrator issues an upgrade command.

MN

CNA CNA CNA

VM VM VM VM VM

ISO distribution

Automatic

mounting

OS process: The HwUVPUpgrade.exe software

automatically identifies the ISO and displays tool tips.

Silent installation

Implementation

Administrators can perform one-click PVDriver upgrade without any assistance from the user.

Citrix's xen tools cannot be automatically upgraded.

VMWare's Update Manager can be automatically upgraded.




Desktop Cloud



11

1.4 O&M of Cloud Terminals

1.4.1 O&M of TCs

Scenario Analysis


Centralized patch

management

TCM servers are deployed in a centralized manner. Remote TCs can

be upgraded and managed using web interfaces.

Remote fault

location

Problems on the remote TCs hat are distributed in different places can

be located from the local computer, improving the O&M efficiency.

Remote control

and monitoring

Remote scanning, power-on, power-off, and monitoring are

supported.


Office area

Cluster:

TCM01

Cluster:

TCM02

Network

segment 1

Network

segment 2

Network

segment 3

Internet explorer

client

Remote web

operation

Policy and scanning

Scan PushRemotely start/shut down

Office area

Data center

The patch upgrade process is as follows:




Desktop Cloud



12

Uniformly upload

patch files.

Make patch

policies.

Scan TCs by

network segment.

Remotely power

on TCs.

Deliver patch

policies.

Automatically

restart and perform

concurrent upgrade.

Performs

scheduled power-

on and power-off.

Administrator

Remote fault location

Generally, the data center equipment room of carriers is located in a remote spot. Their

customer service centers spread around the city. For example, China Unicom has

approximately 100 customer service centers in Shanghai. The TCM remote assistance

function is adopted in the O&M process of China Unicom.

Scan TCs of customer service

centers.

Search the IP address of user TCs.

Submit monitoring applications.

Administrator

Approve the monitoring on TCs.TC user

Remotely control

User desktop problem

location

TC out-of-board

problem location




Desktop Cloud



13

Implementation

Database

Fragment 2

Management

server

Administrator

DNS server (optional)

Domain name resolution and managementNetwork

Data serverData server

Centerm CE

terminal

XPe

terminalCenterm CE

terminal

XPe

terminal

· Store and manage data in a centralized manner.

· Manage and migrate TCs on the management servers.

· Perform cold backup of management servers and

ensure the system stability.

· Switch on different management servers and implement

management of different fragments.

Features:

Fragment 1 Fragment 2

Fragment 1

Management

server

Centerm Linux

terminal

Centerm Linux

terminal

Windows

(XP, 2000,

Vista, Win 7)

Windows

(XP, 2000,

Vista, Win 7)

Application Scenario

Enterprises require management of TCs in a centralized manner and put certain servers in a

management zone. (Usually, the headquarters only care about data statistics.) Take

Agricultural Bank of China, Fujian branch as an example, the TC management is carried by

local administrators, while the provincial branch only cares about the data statistics.


Shanghai branch of China Unicom monitors VMs in customer service centers using a TC

management platform and OMS portal interface. All the customer service centers are

registered on the TC management platform, and each VM is mapped to an account. Each

counter is configured with a TC. Each TC can be used to log in to a specific VM. On the TC

management platform, you can find the customer service center first, specify the IP addresses

of the TC, and then log in to the specified VM.




Desktop Cloud



14

TCM cluster

Firewall

Building

network

Office area 1 Office area N


One person can upgrade 10,000 TCs in Huawei Shanghai office within one day.

1.5 O&M of Cloud Service

1.5.1 Remote Efficient Management of the WEB Mode

Scenario Analysis

The O&M of desktop cloud includes the O&M of hardware, system, desktop, and so on. The

O&M is moved to the data center and remote management function is required. With the web

interface, you can access the system anywhere from any device. This improves the

maintainability of the desktop cloud.


The O&M of desktop cloud management interface is as follows:




Desktop Cloud



15

TSM Portal

Desktop

administrator

TCM PortalTC

administrator

ITA PortalDesktop VM

administrator

ISM PortalStorage

administrator

Remotely monitor, manage, and control TC terminals.

Perform security control of desktop OS, monitor, and

distribute software.

Shield the complicated operation of Citrix VDesktop

components.

Submit self-help applications, start, stop, and choose

charging packages.

Verify user applications and shield the complicated

operation of the virtual platform.

Monitor virtual resource, adjust policies, and perform

power on/off.

Deliver policies of the main machine system and

perform automatic installation.

Operation

support system

User self-help

interface

System

administrator

Fundamental

device

administrator

Server

administrator

BMS Portal

USER

Portal

OMS Portal

MN Portal

BMC Portal

Hierarchical end-to-end management is implemented:

From bottom up, there is server hardware, storage, system installation, system monitoring,

service provision and operation, TC management, and desktop software management. For

each layer, a WEB remote management mode is adopted.

Process-based service management is implemented:

Device administrator resource preparation—system administrator policy control—user

self-service application—administrator one-key approval—resource automatic dispatching.

Every role focuses on its own service to reduce communication costs. Irrelevant service

processes are shielded.

As a result, the efficiency of service provisioning is improved. Services can be provisioned

for each user within 10 minutes.

Implementation

One to two personnel can provision services to 2000 Huawei employees per month.

Citrix adopts the client management mode. Components, such as xenCenter, are working in an

independent manner and the operation is complex.

VMWare also adopts the client mode, for example, vCenter. Its latest version 4.5 provides

web management interface.




Desktop Cloud



16

1.5.2 Authority and Domain Based Management

Scenario Analysis

If customer wants limit the access right of data (VMs) to the maintainer, the

administrator should configure the data partition that this maintainer can access,

and divide the data to different data partition. The administrator can divide the

data to different partition by organization or area, the maintainer of different

organization or area can only access the data belong to this organization or area,

the maintainer can’t access the data belong to other organization or area. This

function improves the availability and security of the cloud system.


The management web interface of Authority and Domain Based Management is

shown below.

The administrator configures different data partition by organization or area.

The administrator configures the maintainers belong to the data partition. This

means the maintainers of this data partition can only access the VMs belongs to

this data partition.




Desktop Cloud



17

The maintainers of this data partition can only access the VMs belongs to this data

partition.

Implementation

Desktop clouds of Huawei, the maintainers of a certain branch login to the management

system and manage the VMs belong to the branch.

1.5.3 Automatic Service Provisioning e-Flow

Scenario Analysis

Operation Scenario Description

Service provisioning and

reclaiming workflow An e-flow is used to provision the VMs, improving the

provisioning efficiency.




Desktop Cloud



18

This section focuses on the service provisioning and reclaiming e-flow. Service provisioning

is an important step to provide VMs for users. It successfully supports service provisioning of

2000 VMs per month.


The following figure shows the architecture and process of the service provisioning e-flow:


35pt

32pt

) :18pt

Page 1

unified service

provisioning Portal

v.huawei.com

Shanghai orange

area

SOAP agent

Shanghai isolation

intranet

SOAP agent

2. Specification

management4. Process control

Serv

ice

resou

rce

po

ol

Serv

ice re

so

urc

e p

ool

User application

Choose

specification

Orange

area/isolation

intranet

Asset administrator

review

3. Scheduled

VMs creation 1. Image

management

Automatic

distribution Local image

servers of SRI

Beijing orange area

SOAP agent

Shenzhen orange

area

SOAP agent

Se

rvic

e re

so

urc

e p

oo

l

Se

rvic

e re

so

urc

e p

oo

l

This solution uses safe and open SOAP interfaces, and can be adapted to the desktop cloud

management of various scenarios.

The difference of underlying services is shielded. One O&M mechanism is used, improving

the O&M efficiency.

Implementation

The automatic service provisioning workflow features in the following three aspects:

specification differentiated management, scheduled VM creation, and registration and

deregistration workflows.




Desktop Cloud



19

35pt

32pt

) :18pt

Research staff 2V2G80GB

Outsourced staff 2V2G60GB

Long-term

business trip2V2G40GB

Temporary

business trip2V2G25GB

Foreign staffChinese and

English version

Specification differentiated management Scheduled VM creation

Scheduled task starting

Automatic backup

Online patch distribution

Resource pool random distribution

Distribution on-demand

Registration and deregistration

workflow

Flexible rights configuration

Bonding administrators by

department

Three-level review

Asset automatic consignment

Advantage: Configure creation at

night, configure backup data based

on user specification usage, without

intervention, save O&M workload,

and speed up the service provisioning.

Advantage: Workflow-based

operation and specification-based

management. The review goes

through users, supervisors and asset

administrators. It stores the information

authenticity, solves asset consignment

problems, and enhance operation

efficiency.

Person

Advantage: save storage space

35520/450 = 78

1.5.4 Resource Sharing of Meeting Rooms or Personnel on Business Trips

Scenario Analysis

Detailed Description

Shanghai office

entitative

meeting room

There are 284 meeting rooms spread around various office areas of the

institute, which causes difficulties in management and a heavy

workload. The PCs of meeting rooms have always been the blind zone

of management.

Personnel on

temporary

business trips

Approximately 500 people are moving around on temporary business

trips. The large mobility makes the traditional asset return application

process complicated.

Scenario features Log in to desktops by mstsc or ICA.Remotely share data in the

imeeting system.

Display and share office files.

Store no user data on local device.

Large personnel mobility.




Desktop Cloud



20



35pt

32pt

) :18pt

Page 1

China\Domain users

VM VM VM

VM

VM

VM

DDC desktop group

Pool mode

First come first serve

2. Domain bonding

desktop group

Include/belong to

3. DDC desktop group-related Pool

4. When sign on, the DDC

randomly distributes a VM.

https://shcloud.huawei.com

5. Use exclusive VM after sign on.

Release resources after deregistration.

VM resource

list

VM resource pool

Domain user

Allocation mechanism: uses a resource pool mode, in a first come first serve manner,

automatically allocates resources, and controls it using desktop group attributes.

Reclaiming mechanism: configures the time-out time of an ICA session as two hours. When

the time is out, automatically releases the resources and updates the data in the VDA registry.

Template mechanism: allows users to write in the personal directory (of desktop).

Automatically deletes personal profiles and history recording using a script during user

deregistration.

Implementation

Traditional Method Virtual Desktop

Maintenance workload of

800 machines

Three persons (according to the

industry practice: 100 PCs/person)

0.5 person

Application time of

personnel on business trips

60 minutes/person 1 minutes/person

Application times of

personnel on business trips

1000 times/year 0

Recycling and returning 60 minutes/person 0

Reuse rate 20% 90%




Desktop Cloud



21


35pt

32pt

) :18pt

Page 1

China\

Domain users

Associated partition groups

Meeting room sign on

Personnel on business trips sign on

Emergency channel for all staffs

An

y tim

An

wh

ere

An

y o

ne

Virtual desktop pool

Automatic start

Resource distribution

Before work After work

Automatic

adjustment

Idle resource

Working time

Automatic

recycling

VM release

Post use

Automatic shutdown

Resource release

Automatic

distribution

VM bonding

Sign on

Set the virtual desktop policy as follows:

Twenty VMs are in the idle state at night. They can be used by the personnel working

overtime. At 05:00, automatically start all the 200 VMs. There is a peak workload period at

around 10:00. After the peak workload period, if VMs in the idle state are less than 50, the

system starts another 30 VMs. If VMs in the idle state are more than 50, the system shuts

down those unnecessary VMs. At 21:00, the system automatically shuts down VMs except 20

VMs.




Desktop Cloud



22

Documents

Huawei FusionCloud Desktop Solution 3.0 Efficient ... 3.0 Efficient Operation and Maintenance White Paper ... using PXE Virtual machine ... Uses proactive monitoring modes based on