Collaboration Infrastructure in Vmware Cloud on AWS (Public Cloud)

#CLUS Collaboration Infrastructure in VMware Cloud on AWS (Public Cloud)

Mohammed Noorulla Khan – Technical Leader @mdnoorullakhan BRKCOL-2008

#CLUS • CCIE

• CCSI

• 12 Years of Experience

• System Administrator About me • Instructor • Field Engineer

• Network Consulting Engineer • TAC Engineer

• TAC Escalation Engineer

• Technical Leader

• This session covers how customer can leverage IaaS to deploy and extend Collaboration Infrastructure (Cisco Unified Communication Manager, Cisco Unified IM and Presence , Unified Contact Center Enterprise,) in VMware cloud on AWS.

• This session demonstrates configuration and administrative requirement to host Collaboration Infrastructure. This session also covers basics of AWS and VMware as foundation.

• Introduction

• Cloud Computing Overview

• AWS Overview

• VMware Cloud on AWS Overview

• Cisco Collaboration on VMware Cloud on AWS

• Demo

Questions? Use Cisco Webex Teams to chat with the speaker after the session How 1 Find this session in the Cisco Live Mobile App 2 Click “Join the Discussion” 3 Install Webex Teams or go directly to the team space 4 Enter messages/questions in the team space

Webex Teams will be moderated cs.co/ciscolivebot#BRKCOL-2008 by the speaker until June 16, 2019.

• Cloud computing is the on-demand delivery of compute, storage, applications, and other IT resources through a cloud services platform via the internet with pay-as- you-go pricing.

• Stop thinking of infrastructure hardware, instead think of it as software

• Speed and Agility

• Capacity (Scale Out and Scale In)

• Global in few minutes

• Operational Expense

• Cost (Pay as you Use)

Private Public Cloud Cloud

Community Hybrid Cloud

• AWS was launched in 2006

• AWS was one of the first companies to introduce a pay-as-you-go cloud computing model that scales to provide users with compute, storage or throughput as needed.

• Compute – EC2

• Storage – S3, EBS

• Networking – VPC, Direct Connect

• Security – IAM

• Database – RDS, Amazon Aurora

New region Bahrain, Cape Town, Jakarta, and Milan

83% 60% 65%

of workloads are of large enterprises of organizations have virtualized today (IDC) run VMs in the a hybrid cloud public cloud (IDC) strategy today (IDC *)

IDC Infographic Video: “Public Cloud for Data Extension and Replacement”. Gary Chen. Available on Youtube

Multiple Virtual Inconsistent Operational Learn New Multiple Control & Machine Formats Networks Inconsistency Skillsets & Tools Monitoring Mechanisms

. Consistent and simple to operate . Compatible across on premise and public cloud . Ready for VMs and containers

. Leading compute, storage, and network . Flexible consumption economics virtualization capabilities . Broadest set of cloud services . Support for broad range of workloads . Global scale and reach . Standard for the enterprise DC

November 2018 October 2016 14 releases—200+ Partnership features Announced 8 regions—24 AZs

August 2017 Initial availability one region

vCenter Server

VMware Cloud on AWS = vSphere vSAN NSX VMware Software + AWS Infrastructure

AWS Compute, Storage, Networking…

Software Defined Data Center

vSphere

• SDDC as an on-demand cloud service NSX • Zero to workload ready in 90 minutes vSAN • Add host capacity in 12 minutes ESXi

AWS Global Infrastructure

Rich VMware SDDC Consistency and Easy workload Direct access to the Existing and delivered as a cloud familiarity of VMware portability and power of nativeAWS new apps with service on AWS technologies hybridcapabilities services containers and VMs

Data Center Extension Cloud Migration Next-gen Applications

. On-demand capacity . Data center migration . Application modernization

. DR and backup . Infrastructure refresh . Test and development

. Footprint expansion . Application migration

i3 R5

. Bare Metal . Bare Metal . i3.16XL Equivalent . r3.16XL Equivalent . 36 Cores/72 vCPUs . 48 Cores/96 vCPUs . 512GiB Memory15TiB* . 768GiB Memory15TiB* . NVMe All-Flash Storage . EBS backed VSAN

. 25Gb ENA . 25Gb ENA

vCenter Server

NSX

vSAN

ESXi

vCenter Server Amazon Amazon Amazon EC2 S3 RDS NSX

vSAN Amazon AWS Direct Amazon ESXi Redshift Connect Dynamo DB

AWS Global Infrastructure

vCenter vCenter Server Server Amazon Amazon Amazon ESXi EC2 S3 RDS NSX

vSAN Amazon AWS Direct Amazon ESXi Redshift Connect Dynamo DB

AWS Global Infrastructure

Customer Owned . IPSec VPN VPC ENIs for AWS Account Compute Gateway . Direct Connect

Customer VMware Datacenters Cloud SDDC . L2VPN . IPSec VPN . Direct Connect

Customer Data Center VMware Cloud on AWS SDDC

CGW Logical Network 1 VM VM

vSphere VM VM

IGW Compute Clusters

Management MGW Internet NSX MGR vSphere VMK

Direct Connect Management VGW

Core Offering

On-Demand (hourly) 1 Year Reserved* 3 Year Reserved*

List Price ($ per Host) $8.3681 $51,987 $109,366

Effective Monthly* $6,109 $4,332 $3,038

Savings Over On-Demand - 30% 50%

Note: . List price only. Does not factor in Hybrid Loyalty Program and sales discount. Discounts apply to the full bundle. . Price includes VMware software and AWS infrastructure, and support costs. . Bandwidth and public IP charges are not included. They will be the same as AWS’ published rates.

A new AWS account to run SDDC resources. VMware Account Is owned, operated, and paid directly by VMware Single tenant for all SDDC resources

Is owned, operated, and paid AWS Account Private to VMware Cloud SDDC Full access to the Native Aws services

VMware Cloud on AWS Console . https://my.vmware.com credentials . Organizations . Identity and Access Management

Create a new SDDC . SDDC Name . Specify AWS account vmc.vmware.com . Management network CIDR . Number of Hosts (4 to 32)

. Add and remove ESXi hosts

. Virtual machine administration

. Console user and role management . Firewall configuration vmc.vmware.com . EIP and NAT configuration

. VPN connectivity

. Hybrid Linked-Mode

. Logical network configuration

. VM storage policies

vSphere H5 Web Client

• Pay for entire host

• Separate bill from AWS

• No Auto Scaling

• Limited availability zone

• Restricted VMware administrative control

• Limited feature set

• All information about VMware Cloud on AWS is copied from VMware's public docs as of the time of this writing; subject to change by VMware and/or Amazon without notice.

• Please see vmware.com / aws.amazon.com and your VMware/Amazon account teams for latest information on VMware Cloud on AWS.

Applications Calling Meetings Teams Care

Platforms UCM IMP CUC UCCE/X

3rd-party Compute + VMware Cloud on AWS BE6000/7000 Cisco HyperFlex / UCS DAS/SAN/NAS/HCI

Devices Cisco or 3rd party phones Cisco Collaboration devices Mobile Desktop

UCM 12.5 IMP 12.5 CUC 12.5 UCCE 12.0 UCCX 12.0

Calling Contact Center

VMware Cloud on AWS

For latest on supported apps, see https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/uc_system/virtualization/vmware-cloud-aws.html

BE6000 / BE7000 Packaged Collaboration solution for easy Appliances with design, quote, deliver, install “ESXi Embedded OEM”

Tested Reference Configurations Explicit validation & prescriptive guidance (TRCs) with “ESXi Resale OEM” from Collaboration apps

Specs-based-Cisco Cisco on Cisco with “ESXi Resale OEM”

Specs-based-3rd-party with customer-provided VMware Cisco on 3rd-party (now including VMware Cloud on AWS for selected apps) Universe of Hardware

Only Supported on VMware Cloud on AWS, Others Not supported

vSphere ESXi GCE Hypervisor

Azure VMware Cloud AWS EC2 AWS EC2 Hypervisor on AWS Bare-metal-instance Hypervisor

• Not an on-premises solution … public cloud IaaS

• No hardware BOMs/configs or ESXi licenses.

• Not a SolutionsPlus or OEM of VMware … reference-sell infra.

• Buy from Vmware. TAC support from VMware.

• Leverage VMware or VMware partner for for infra plan/design/implement/operate, produce/validate VMC-AWS quotes or specs, reconcile Cisco app requirements with what VMC-AWS offers.

• Not a Cisco on Cisco solution … Cisco on 3rd-party.

• But infra not tested, validated, regressed or TAC-supported by Cisco. • Cisco apps can’t provide prescriptive design guidance for infra beyond SRND / PA / CVD

• Customer must have support relationship with their 3rd-party vendors (VMware + ISP or Interconnect Provider).

#CLUS BRKCOL-2008 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 49 Why VMware Cloud on AWS? Why not WebEx/HCS, BE6K/7K or UC on UCS/HX ? • To align with CXO/DC team directive (data center exit to IaaS)

• Zero on-premises infrastructure to pay for, manage, refresh

• Same full feature sets as on-premises offers (UCM, IMP, CUC, UCCE/X)

• Same scale / max user options as on-premises offers

• To help my customer on their Cloud Collab journey (On-prem  IaaS  SaaS)

1. Migrate perpetual to Flex 2. Migrate On-prem to IaaS 3. Migrate IaaS to SaaS

Application Licensing & Support $ $ $ Application Software

Infrastructure … Webex CJP BroadWorks Calling VMware Cloud on AWS Facilities Cisco Cloud Collaboration Public cloud SaaS that is either: My apps My apps • Cisco-provided VMware's public cloud IaaS My VMware • Partner-provided, Cisco-powered My Hardware My sites & DC’s #CLUS BRKCOL-2008 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 51 Cisco Collaboration Flex Plan

Subscription-based purchasing for meetings, calling, team collaboration, and contact center for consistency, flexibility, and value

Contact Meetings Calling Center

Named user Enterprise and / Named Enterprise or or Concurrent Agent Agreement or user Agreement Active user

Team collaboration Use team collaboration for all-in-one teamwork

Applications Calling Meetings Teams Care

Cisco BroadWorks Cisco HCS Cisco Webex Cisco BroadCloud Cisco Customer Platforms Journey Platform

Partner hosted Cisco cloud

Devices Cisco or 3rd party phones Cisco Collaboration devices Mobile Desktop

• VMware Cloud on AWS lives in a subset of Amazon’s AWS datacenters. • AWS data center hierarchy = Region  Availability Zones (AZ’s)  Data Centers (DC’s).

Refer vmware.com and aws.amazon.com for latest: https://aws.amazon.com/about-aws/global-infrastructure/ https://cloud.vmware.com/vmc-aws/faq#general

#CLUS BRKCOL-2008 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 55 Geographic & Traffic Considerations • At what site(s) will my users and their endpoints physically live? • …and where are they in relation to VMC-AWS data centers? • Where will my UC application VMs live? • At one of my sites? • In one or more VMware Cloud on AWS data centers (AWS Region/AZ/DC) ? • Both? (“hybrid infra” for my apps)

• Where will my VOIP gateways and DSP’s live? • …and where are they in relation to endpoints and UC application VMs? • What will my traffic flows be? Which ones will hit VMC-AWS ? • I.e. signalling, media and data between (endpoint | app VM) and (other endpoint | other app VM | gateway/DSP)

VMware Cloud on AWS VMware Cloud on AWS in Amazon US East – N. Virginia

Upgrades (6GB ISO) Backup/ restore CDR or CC reports Customer HQ in Georgia, US SFTP MWI User logins Remote Redundancy CoW Record/ Status updates Public/Private Networks playback Compliance Agent status media CTI

Media

#CLUS BRKCOL-2008 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 57 Networking Considerations VMC-AWS in Region/AZ/DC #2 (see Amazon+VMware for details between Regions or • “WAN” from On-premises to VMC-AWS between AZs) VMC-AWS in IaaS is via VPN or Direct Connect Region/AZ/DC #1 NSX • “WAN” between VMC-AWS datacenters is AWS VPC AWS network backbone

DX via • “LAN” within VMC-AWS datacenters = VPN over Interconnect AWS VPC with “WAN interconnect” via Public Internet Provider VMware NSX Edge On-premises HQ • Meet minimum bandwidth & latency requirement for UCM Clustering over WAN, Phone to UCM per the SRND. Intranet WAN

On-premises BR1

• Public cloud IaaS introduces new failure points to plan around

• Ensure adequate support relationships with the VMware, ISP, Interconnect.

• Consider deploying SRST, MGCP Fallback, CoW.

• Refer the SRND, Cisco Preferred Architecture (PA) for Enterprise Collaboration.

• CPUs on VMC-AWS is 2.30 GHz, UCM/IMP/CUC to use caveated support for ESXi CPU Reservations for dense VMs on <2.50 GHz CPU.

• CUC 12.5 only permits 2.30 GHz on VMC-AWS, not on-premises infra.

• If 2.30 GHz CPU doesn’t provide equivalent performance as 2.50 GHz CPUs, customer must find another way to mitigate.

• Application sizing = Same as today. • Use (SRND+CST) or (PA+CVD) to get VM counts & configs by Collab app SRND PA CVD

• VM Placement = Same as today. • Use (VMPT or QC) with Specs-based-servers.

• Release: - Supported from Release 12.0 onwards (CCE and CCX)

• Deployments: - Support for UCCE (all deployments), PCCE (4k and 12k) - Support for UCCX 100, 300 and 400 agent OVA profile - Check UCCE Reference Designs for any UCCE-specific CPU rules. - A2Q is required for ALL DEPLOYMENTS on VMware Cloud on AWS

• Licensing: - Perpetual licenses may be deployed on VMC-AWS; Collaboration Flex not required - Customer is responsible for converting licenses from premises (perpetual) to cloud (subscription) for:

 MS Windows Server

 MS SQL Server

• Redundant WAN from customer premises to VMC-AWS is mandatory.

• Networking among VMC-AWS DC, AZ and Regions is transparent to customer; therefore UCCE Public and Private networks are not controllable.

• If both UCCE Public and Private networks go down, UCCE fault tolerance and fault handling may be degraded: • UCCE outage may occur. • Reporting data may be lost. • Post-fault sync failure (e.g. due to split brain) preventing auto-sync & recover

UC on UCS UC on “VMware Cloud on AWS”

$296,324 total for 3 years $328,098 total for 3 years*

4x C240 M5SX TRC#2 (112 total pcores) Hardware $216,396 CAPEX • VMC-AWS 3-year term pricing (no other 4x ESXi Enterprise Plus 6.x 2-CPU discounts) for 3x hosts (108 total pcores) Licensing $46,600 CAPEX • Does not include other fees like network egress, elastic IP, stretched cluster, etc. • 3-year SNTC for $9928 OPEX $109,366 OPEX/year ($328,098 total) • 3-year 2-CPU ISV1 for $23,400 OPEX

List pricing only, no customer discounts / promos / incentives applied.

• Cisco TAC engages on products purchased from Cisco with a valid, paid-up maintenance contract.

• With UC on VMC-AWS, support is demarcated. Not Cisco • Cisco owns UC apps and phones • Customer owns 3rd-party apps & providers. Ensure customer has support relationships with these vendors. • VMware’s “cloud TAC” may be needed for granular debugs/traces; customer owns any required triage coordination.

• VMware controls all VMC-AWS software versions and upgrade schedule. • At time of this writing, VMC-AWS uses ESXi 6.7. • “ESXi 6.7 on VMC-AWS” vs. “ESXi 6.7 on on-premises infra” will differ, and may continue to differ for future ESXi versions. • Note: There is risk VMware may upgrade to a new ESXi version before Cisco apps have qualified. TAC will be unable to provide effective technical support until the new ESXi version is qualified.

• VMware controls all hardware configurations and refresh schedule. • E.g. based on public VMC-AWS docs at time of this writing, HW is as described in Design slides. • On host failure or by planned maintenance by VMware. Work with VMware to schedule maintenance for least impact to you. Work with your VMware account team for roadmap, or queries to defer SW/HW refresh.

• From VMware (check with your VMware account team for latest)

• VMware Cloud on AWS portal: https://cloud.vmware.com/vmc-aws

• VMware Cloud on AWS pricing: https://cloud.vmware.com/vmc-aws/pricing • VMware Cloud on AWS Technical Overview

• From Amazon (check with your Amazon account team for latest)

• FAQ on VMware Cloud on AWS portal: https://aws.amazon.com/vmware/faqs/

• From Cisco • Cisco Collaboration Virtualization requirements: www.cisco.com/go/virtualized-collaboration

• Caveated Support Policy for ESXi CPU Reservations+DRS: (including 2.30 GHz CPU) http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/uc_system/virtualization/cucm-vmware-support.html

• Caveated Support Policy for VMware Cloud on AWS: https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/uc_system/virtualization/vmware-cloud-aws.html

#CLUS BRKCOL-2008 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 72 Complete your online session • Please complete your session survey after each session. Your feedback evaluation is very important.

• Complete a minimum of 4 session surveys and the Overall Conference survey (starting on Thursday) to receive your Cisco Live water bottle.

• All surveys can be taken in the Cisco Live Mobile App or by logging in to the Session Catalog on ciscolive.cisco.com/us.

Cisco Live sessions will be available for viewing on demand after the event at ciscolive.cisco.com.

Demos in the Walk-in labs Cisco campus

Meet the engineer Related sessions 1:1 meetings

#CLUS #CLUS