Tech: Installing and cloning SAP inside Sun Solaris Containers

Mark Wondratschek, member of SAP’s High Availability Initiative, created a great 6-parts how-to for installing SAP inside a Sun Solaris 10 zone and cloning it inside other zones for high availability purposes:

This is the first part of a blogger series describing how to easily create runable shadow copies of productive systems using Sun Solaris 10 native OS virtualization functionalities (Solaris Zones).
These shadow systems can be used for applying updates, patches or similar tasks which would result in a downtime of the productive system usually.
After the desired task was performed successfully the shadow systems can be switched with the productive systems. This way the planned downtime of the productive system landscape can be reduced dramatically.

In this part you will get a short overview about the general concepts. The following parts provide a step-by-step approach based on a SAP NetWeaver 2004s SR1 system (usage type EP) running on Solaris 10 operating system…

Worth to read both Installing SAP systems in Solaris 10 Zones and Creating SAP system clones using Solaris 10 virtualization concepts.

Kidaro secures $10 million in funding

Quoting from the Kidaro official announcement:

Kidaro, provider of virtual desktop computing for the enterprise without boundaries, has announced the closing of a $10-million financing round. New investor Opus Capital led the round, joining existing investors Genesis Partners and Storm Ventures. Opus Capital General Partner Dan Avida will join Kidaro’s Board of Directors…

Parallels to offer virtual OpenGL and DirectX in 2007

In an interview with Parallels Marketing Manager, Ben Rudolph, Inside Mac Games discovered the company is going to offer 3D capabilities inside virtual machines since next year:


Inside Mac Games: What’s your view on similar virtualization software such as Boot Camp, Cross Over etc.?

Rudolph: Well, neither are virtualization solutions, and both have productivity problems. Boot Camp is fast and offers a true native experience, but you can’t use it at the same time as OS X, so you’re effectively killing the productivity of your Mac.

CrossOver is cool at first glance, since you can run Windows apps without Windows, but there are some real problems when you get to work. No device support, slow performance, and a very limited program set.

One of the features missing in Parallels I believe is 3D gaming support for games such as Battlefield 1942, Unreal Tournament, etc.

Inside Mac Games: Do you plan to implement this key feature in the future?

Rudolph: This is something that we’re already working on. The goal is to have OpenGL and DirectX support in our next version, which should be in beta around the turn of the year…

Read the whole interview at source.

Is Parallels going to beat on time VMware once again?

Webcast: How to Deliver the Virtual Desktop with Citrix Technologies

Citrix arranged for December 14th a new webcast about its current approach to Virtual Desktop Infrastructure (VDI):

Perplexed by what kind of virtual desktop to deliver to your users? Join us for this month’s TechTalk webinar as Sunil Kumar, discusses how you can deliver a flexible, personalized desktop experience to your users through the new Desktop Broker feature of Presentation Server. Find out how Desktop Broker works and what components are needed for implementation. Learn step-by-step instructions on how to deploy and configure desktop broker in your Presentation Server environment. How can Desktop Broker help your IT organization?–By moving the user desktop closer to IT while giving your users the desktop experience they need.

In this session you will learn about:

  • Mapping users to the “right desktop”
  • Architectural vision behind desktop broker feature
  • Desktop broker configuration and interactions
  • Planning and deploying desktop broker in you IT environment

Register for it here.

The virtualization.info Events Calendar has been updated accordingly.

VMware fades out VMTN Subscription

Without a formal announcement VMware just fade out its VMTN Subscription from every page of its official site.

The VMTN Subscription, launched summer 2005, in a very cheap offering allowing developers to use most of VMware products at $299 annual subscription, mimicking the famous Microsoft Solution Developer Network (MSDN).

So far the offering raised notable consensus, even winning awards as innovative product for development communities.

Today the VMTN Subscription disappeared from development and test products page, from all products page, from the VMware Store, from the VMTN Online page and even from the Download page.

At the moment of writing only the direct link to product description is working, as well as the direct link to product purchase in the VMware Store, but transaction will not complete successfully.

What will happen to VMTN Subscription and its subscribers is unclear.

More details as soon as possible.

Update: VMware finally took an official position about VMTN Subscription and released an end-of-life announcement:

VMware has made the decision to discontinue the VMware Technology Network (VMTN) Subscription service.

Over the last year and a half, VMware has moved to take the core benefits of VMTN Subscription – broad availability of VMware products for developers and ISVs – and extend them to all users on a general basis as well as to other aspects of VMware’s technology.

In particular, VMware has

  • introduced free products for server and desktop use, VMware Server and VMware Player, which have had over 3 Million downloads
  • launched VMware Infrastructure Starter Edition for entry-level use of VMware’s core enterprise datacenter solution
  • enhanced its Technology Alliance Partner program offerings for enabling ISVs and other technology partners introduced the Community Source program for source code access to VMware’s ESX Server
  • and made other technologies fully open, including the VMDK disk format, our Perl toolkit and the VMware SDK

These moves have subsumed the reasons for having an independent VMTN Subscription offering.

The last day of sale of VMTN Subscription will be January 9, 2007.

In other words VMware states that overall corporate strategy justifies suppression of VMTN Subscription. I wonder if customers have same opinion.

Second update:VMware informs its Channel Partners that VMTN Subscription will disappear from pricelists since February 2007.

Current customers will receive updates and upgrades until their license will expire, but will no be able to buy anymore per-incident support.

The last point is remarkable and could put in serious doubt value of per-incident support approach, even on other products.

Third update: Today, February 6th, VMware sent out its VMTN subscribers an End-of-Life notice through email:

We have made some recent changes to our VMware Technology Network (VMTN).

As a result, VMware feels there is no longer a need for the VMware VMTN Subscription and will no longer sell or renew VMware VMTN Subscriptions as of February 16, 2007.

To further protect your investment in software obtained through the VMware VMTN Subscription program, you are now also eligible, upon expiration of your VMTN Subscription, to purchase separate service and support contract(s) at the current list price. This is something never before offered to VMware VMTN Subscribers and will entitle you to continued software upgrades and support during your contracted support period. It is strongly encouraged that you obtain a separate support contract at the time your VMTN subscription expires. If you decide later to purchase support on the software obtained through your VMTN Subscription, the following Terms and Conditions will apply. You must pay the applicable fees for the current contract term and the amount of fees that would have been paid for the period of time that customer had not enrolled in the services. You may also be subject to a 20% reinstatement fee based upon the total amount of support purchased…

This officially put an ends to VMTN Subscription, despite customers complains.

Choosing between VMware Server and ESX Server

Customers approaching today server virtualization have multiple vendors and multiple products from the same vendor to choose from.

Many adoption projects fail because companies didn’t carefully evaluate which platform best fits their needs, still unable to fully understand all implications of a choice.

A very simple project may never return on the investment because the adopted solution has a too expensive cost of ownership. On the other side a project which starts small but soon grows in complexity and involves more and more virtual machines at a fast pace, may fail because the adopted platform is not able to scale with it.

In this article we’ll approach the virtualization market leader, VMware, offering, evaluating differences between their products for enterprise deployment: the new, free Server and the popular, expensive ESX Server.

Is a free product reliable enough?

The very first thing to do is dismantle a possible preconception from virtualization newcomers about VMware Server: when a solution is free, mostly if it’s suggested for production use, it’s often considered less reliable, less performing or with less features than commercial competitors.

This habit could lead to discard VMware Server immediately when deciding which product to adopt for serious and complex virtualization projects.

In VMware Server case nothing can be further from the truth.

Before starting its huge investment to deploy virtualization in every company on the planet, VMware sold for five years previous Server versions under the name of GSX Server, with a price near the ESX Server one.

GSX Server has always been aimed at datacenter deployment as well as ESX Server and when the VMware enterprise management tool, VirtualCenter, came out it was immediately able to control both products in the same way.

At GSX Server launch in 2001 the company released an official announcement mentioning mainframe-class control and 300 worldwide known companies adhered its beta program the year before.

After releasing its first free virtualization product at the end of 2005 with VMware Player, the company decided to transform the upcoming version of GSX Server 4.0 in a free product too, renaming it Server 1.0.

Therefore after considering GSX Server a reliable product for so much time, the advent of free edition shouldn’t lower customers’ confidence in product’s capabilities.

Performances versus flexibility

Apart price, the very first difference between VMware Server and ESX Server every consultant or salesman would underline is performance achievement.

At today nobody ever published a benchmark comparison between the two platforms running the same virtual machine on the same hardware, but they way they are architected let people presume which products performs better.

While VMware Server needs an underlying operating system to be installed on, its bigger brother ESX doesn’t: it’s a bare metal solution as the industry usually calls it.

In other words part of ESX Server acts as an operating system, booting the hardware and managing it to achieve all required virtualization tasks, in the same way an appliance would do.

This difference in approach reflects a deep difference in behaviour: while Server capabilities and performances are capped by the hosting operating system, ESX Server is designed to take out the most from available hardware, with the thinnest OS layer possible.

Performing by design means ESX Server can offer customers not only better performances, but also a better consolidation ratio: the amount of concurrent running virtual machines which can be safely allocated for each CPU core in the physical host.

While VMware suggests keeping this ratio between 2 and 4 with Server, customers can reach 4 to 8 with ESX.

These values are highly dependant on expected workload on running virtual machines and on hosted applications inside: a very busy ESX Server may not allow more than three virtual machines per core while a very light Sever could easily run 10 web servers per core.

But in general they can be considered as a good reference point.

The ESX Server capability to directly control hardware components permits to improve performances also in other aspects: for example VMware developed a special file system called VMFS where to store virtual machines, which is faster and more reliable than traditional multi-purpose file systems modern operating systems offer.

Unfortunately when a virtual machine stored on VMFS needs to be migrated on another VMware product its format has to be converted.

VMware Server cannot count on VMFS and its performances depend on Windows and Linux file systems but its virtual machines can be moved on the fly on any computer with a burned DVD or a USB key, considering it just like a standard folder with a bunch of files.

But a bare metal approach brings severe limitations along with benefits: since the product itself acts as an OS, only hardware which has its drivers included will work.

So, for example, at the moment of writing VMware doesn’t include drivers for local SATA disks in ESX Server, and customers adopting it have to choose between local SCSI disks or remote storage facilities, like NAS and SANs.

Customers must also be aware that not only single equipment pieces could not be usable, but a whole machine could not as well: VMware reserves itself right to officially support only a limited amount of systems on the market, so we cannot run ESX Server on any hardware available in our datacenter and receive support for it.

The hosted approach of VMware Server instead permits to rely on underlying operating system for hardware support and drivers availability.

Anything the OS can do, like connecting a remote iSCSI disk or driving a local tape backup unit, is immediately available for Server virtual machines use.

Software availability and support is impacted as well by this difference in approach.

In ESX Server there is a limited amount of installed service utility, new installed applications could not work on it because some mandatory libraries are missing, and customers are highly discouraged to add them, to not mine reliability of the whole system.

This reduces risks but can translate in administrative pains anytime VMware didn’t implement a component needful for us.

In VMware Server environments any program can be installed on the host operating system, allowing customers to achieve tasks like disks defragmentation or backup, performance monitoring or remote management, with tools of their choice, maybe returning on an investment already done before.

Security and learning curve

Security is a hot point of difference between two products.

ESX Server has all characteristics of typical hardware solutions usually called appliances in IT Security: a black box with its own operating system, tailored for performances and minimal attack surface, with a preconfigured application on top (a firewall, an antispam, etc.).

Inside it customers find essential (and sometimes insufficient) tools for administration and vendor doesn’t support installation of any other piece of software which could introduce vulnerabilities in the system.

The appliance approach is a double edge weapon: from a point of view it cuts away the complex task of securing the environment, performing the so called hardening procedure to the operating system.

It also avoids administrators to care about system patching: when a new vulnerability on included components appears, customer just has to wait VMware to release the proper patch or a platform replacement.

For these reasons appliances, and ESX Server, are considered solutions with a lower total cost of ownership (TCO).

But from another point of view anyway, customers have few or no capability to perform an emergency operation on a vulnerable platform component.

If a system is exposed to attacks, recognized as vulnerable, but VMware is in late for a patch administrators have to mitigate risks recurring network defences where possible, or avoiding using the compromised feature.

Last but not least in some highly security environments a black box is not allowed at all, by corporate policy, for inability to fully control the platform.

In a hosted solution like VMware Server we have to face opposite problems: full control on the operating system behind the application implies notable knowledge for hardening it, time and a tremendous amount of time for finding, testing and implementing new patches.

In fact it’s not only a problem of allowing time to monitor new security bulletins, downloading patches and installing them, but more important it’s a problem testing the patch and judging it reliable before applying it to production environment.

A patch may fix security vulnerability but impact on overall system reliability.
To assure this doesn’t happen a company should have a lab environment, where production systems are replicated, a valuable network traffic generator and a team handling the whole QA phase.

It’s evident this approach has huge costs which few companies can sustain, so the large majority of customers usually have only two savvy choices: use a hosted solution but maintain its OS unpatched until the application vendor (VMware in this case) doesn’t official approve the patch, or turn to a black box solution.

Less savvy customers allocate time and staff for patch management but implement OS patches without testing them. While this can be accepted on some less critical servers, it’s highly discouraged on a virtualization environment, where reliability is the first need to satisfy.

Another notable difference between VMware Server and ESX Server is the learning curve.

ESX Server has more features which obviously require more time to be mastered, but apart quantity, its adoption involves other aspects impacting on training.

For example a company only adopting Microsoft technologies may find more problems than others in studying ESX Server, because it requires some limited knowledge of Linux environment and commands.

Any delay in understanding the platform has consequences, because administrators have to learn how to interact with product, and are slower in doing troubleshooting or performance tuning.

And this delay is bigger when a company decides to not invest in qualified training.

While ESX Server lets no choices, VMware Server, being a hosted solution, can be installed both on Windows and Linux, permitting to immediately spend existing knowledge.

Boosting products with VirtualCenter

Per se differences between Server and ESX Server can be considered limited. But this changes much when they are used in conjunction with VirtualCenter.

Both products benefit some common enterprise management features like multi-host centralized monitoring console and virtual machine inventory, a template based repository for fast provisioning of new virtual machines, a granular permission system to control user access to virtual machines, and a flexible alerting service.

But ESX Server is much more integrated with VirtualCenter than Server, and can perform more complex operations like the famous VMotion: migration of a virtual machine from a physical host to another without interruption of service.

This integration is even tighter between the new ESX Server 3.0 and VirtualCenter 2.0, called together VMware Infrastructure 3, permitting more acrobatics.

The new platform for example is able to detect failures on a physical host, and restart a lost virtual machine on a different one available in the datacenter.

Another impressive capability permits to dynamically move away a running virtual machine from the physical host where it’s running if it becomes overloaded, and to place it on a less busy server. All without manual intervention and without interruption of service.

While these features are desirable by every company to drastically lower maintenance costs, they imply a huge investment in terms of hardware equipment: without a very fast network connection and an expensive SAN infrastructure behind there are no chances to implement them.

At the moment of writing VMware Server cannot benefit same advanced features, since 1.x branch can be remotely managed only by VirtualCenter 1.4, which is limited.

Future releases of VMware Server are expected to be managed by VirtualCenter 2.0 but it’s unclear if listed advanced capabilities will be unlocked for the free platform.

Until that time who decides to adopt Server will have to rely on 3rd party solutions like one provided by vizioncore to obtain some of the VMware Infrastructure 3 capabilities.

Finally VirtualCenter 1.4, despite its limitations, is not free, so customers adopting the free Server but wanting centralized capabilities have to consider the overall price before choosing.

Vital support

As already said in the first part of this article, free software can be often not perceived as fully functional, reliable or performing, and avoided for these reasons.
In some corporate realities it can even be disallowed by company policy, because IT managers are scared by the idea they are relying on a product which has no economical model behind, and the company producing it could suddenly stop supporting it.

To address this legit idea VMware offers Server as a free product but at the same time offers enterprise-grade commercial support for it.

Considering the problem from another point of view, often happens some companies, mostly smallest ones, when considering differences between Server and ESX Server do not feel support a mandatory need, planning to rely to online documentation, support forums, blogs and books to solve any issue popping up during the virtual infrastructure lifecycle.

Unfortunately there are a large amount of factors which make things much more complex than that, including incompatibilities with some hardware configuration, unexpected behaviours of some virtual machines depending on hosted applications, sudden performances bottlenecks at host level and others.

Any virtualization platforms should be considered a mission critical tier, considering on it depend many virtual machines and related services, and customers have few reasons to avoid purchasing commercial support.

In this perspective Server and ESX Server are identical, offering same Gold and Platinum support plans.

Conclusion

VMware Server and ESX Server offer different approaches to solve the same problem, addressing different company needs.

Customers looking for maximum performances and partial datacenter automation should look at ESX Server, knowing it implies a significant cost in hardware equipment, implementation efforts and training time.

Customers looking for a faster startup time and a flexible solution can adopt VMware Server with confidence: it’s reliable enough to be considered in every virtualization project.

This article originally appeared on SearchServerVirtualization.

VMworld 2006 sessions recordings now available

VMware finally made available audio (MP3) and slides of several sessions presented at VMworld 2006 conference in Los Angeles this November.

Some of them are really interesting, like:

  • ADC0135: Choosing and Architecting Storage for Your Environment [VMware]
  • ADC4439: Large, High Density VMware ESX Server Platforms [Sun]
  • ADC9521: Surviving Regulatory Compliance with Virtual Infrastructure [VMware]
  • BCT4539: VMware Consolidated Backup Technology: Today and Future [VMware]
  • BCT4540: Integrating VCB into Your Backup Infrastructure: Best Practices for Implementation and Customization [VMware]
  • BCT9468: HA/DR of Physical and Virtual Environments Using VMware ESX Server and Double-Take for Virtual Systems [Double Take]
  • BCT9560: Using Virtual Infrastructure as a High Availability Platform for Physical Production Servers [PlateSpin]
  • DVT4737-B: VMware Lab Manager Technical Deep Dive [VMware]
  • MDC9807: Troubleshooting Unleashed! A VMware Engineer Shows You How [VMware]
  • MED9518: Best Practices for Building and Securing a VDI Implementation [VMware]
  • TAC9453: Introducing the Next Generation of P2V: VMware Converter 3.0 [VMware]
  • TAC9463: VMware and Hardware Assist Technology (Intel VT and AMD Pacifica) [VMware]
  • TAC9745: Virtualization Management APIs: VMware, DMTF and Xen [VMware]
  • and many others

So it really worth to check the whole list.

VMware has been so kind to also make available manuals used in hands-on labs. A couple you won’t miss probably are:

  • LAB3804: Performance Troubleshooting
  • LAB3805: Securing and Monitoring VMware Infrastructure 3

Download presentations audio and slides, as well as hands-on labs manuals here.

Who missed the big event could read the related virtualization.info round-up.

KVM will be included in Linux kernel 2.6.20

Quoting from Heise Online:

Linus Torvalds has included the virtualization environment KVM (Kernel-based Virtual Machine for Linux) in the tree leading to Linux kernel 2.6.20. In the case of KVM the kernel after loading a special module itself functions as a hypervisor for virtual machines.

KVM, which was presented to the public only barely two months ago, thereby easily overtakes other virtualization solutions such as Xen, OpenVZ and Vserver, which are based on other approaches, on the path toward integration into the kernel.

Read the whole article at source.

The original patch announcement discloses some details about current KVM status:

SMP hosts and UP guests are supported. At the moment only Intel hardware is supported, but AMD virtualization support is being worked on.

Performance currently is non-stellar due to the naive implementation of the mmu virtualization, which throws away most of the shadow page table entries every context switch. We plan to address this in two ways:

  • cache shadow page tables across tlb flushes
  • wait until AMD and Intel release processors with nested page tables

Currently a virtual desktop is responsive but consumes a lot of CPU. Under Windows I tried playing pinball and watching a few flash movies; with a recent CPU one can hardly feel the virtualization. Linux/X is slower, probably due to X being in a separate process…

More details about KVM are available at the official site.

Release: XenSource XenServer and XenExpress

Today XenSource adds to its commercial offering two new solutions: XenServer and XenExpress.

Both are based on the Xen open source hypervisor, and both features the management tools already powering the XenEnteprise solution.
Differences are in capabilities each product has:

  • XenServer, available paying an annual subscription, only allows Windows guest OSes and it’s capped to 8 concurrent VMs / 8 GB physical RAM / 2 physical sockets
  • XenExpress, available for free, allows Linux and Windows guest OSes and it’s capped to 4 concurrent VMs / 4 GB physical RAM / 2 physical sockets / 1 single physical server to manage / no support


Download XenExpress here.

The virtualization.info Virtualization Industry Roadmap has been updated accordingly.

Release: Virtual Iron 3.1

Virtual Iron launches today the new, expected release of its virtualization platform, based on the Xen open source hypervisor since version 3.0.

This new release introduces very interesting features:

  • Support for Intel Xeon 5300 series (Quad Core) with Intel Virtualization Technology (Intel VT)
  • Support for Microsoft Windows guest OS
  • Support for up to 80 virtual servers per physical server
  • Support for up to 16 virtual CPUs and 96GB RAM per single virtual machine

A notable changes appeared on licensing: Virtual Iron 3.0 was available in three editions, Community (free, with GPL), Professional (free and limited, with GPL) and Enterprise, while the new Virtual Iron 3.1 only has the Enterprise edition (with a free evaluation period of 30days) and only one free and limited variant: the Free Single-Server Virtualization and Management (free perpetual license up to 4 sockets, unlimited cores).

Also pricing model changed passing from the old $1,500 price per physical server to $499 per socket.

InfoWorld published a brief preview of this new version with following comment:

So what’s lacking? Polish, performance, and the little bits around the edges. The console interaction provided by Virtual Iron 3.1 is fair for Windows guests, but quite sloppy for Linux guests running X11. This is rather surprising, but mouse tracking under Windows is far superior. Of course, most Linux guests won’t be running X11, which mitigates this problem somewhat.

Also missing is VM snapshot support, as well as basic backup tools. Coupled with the lack of iSCSI and NFS support, very basic network configurations, questionable I/O performance, and the obvious wet-behind-the-ears feel of the package, it may be a bit of a hard sell for production use.

But then, Rome wasn’t built in a day, and I believe that the lack of these features is more reflective of “haven’t gotten there yet” rather than “won’t get there,” and it certainly seems that Virtual Iron is well on its way to becoming a true competitor in the virtualization world. If the next release – slated for first quarter 2007 – manages to address these issues, the company may find that market open wide, especially because at $499 per processor, a full Virtual Iron 3.1 license costs a fraction of a comparable VMware license.

From this point, raw edges or not, Virtual Iron becomes a viable alternatives to VMware and Microsoft virtualization platforms in some environments. Customers will start demanding for comparisons.

The virtualization.info Virtualization Industry Roadmap has been updated accordingly.