Working in IT since 1980 s, the era of old MS-DOS

Transcrição

1

2 Name: Nickname: Alexandre Miguel Almeida Abreu Metralha3 Working in IT since 1980 s, the era of old MS-DOS Worked for Medtech as Network Administrator Solutions Architecth Enterprise Support Manager Currenclty workin for Menshen as Solutions Architecth Microsoft MCP (Hyper-V) VMware VCP

3 1. Virtualization is Virtually Everywhere 2. Why is Virtualization Happening? Benefits 3. How virtualization impacts IT staff, security and change management 4. Top Security Threats Surrounding Virtualization 5. Conclusion

4 What is virtualization? the separation of a resource or request for a service from the underlying physical delivery of that service by VMware

5 Different types of hardware virtualization include: Full virtualization / TYPE 1: Almost complete simulation of the actual hardware to allow software, which typically consists of a guest operating system, to run unmodified Ex: VMware ESXi and Citrix XenServer Partial virtualization: Some but not all of the target environment is simulated. Some guest programs, therefore, may need modifications to run in this virtual environment. Ex: Microsoft Hyper-V Paravirtualization / TYPE 2: A hardware environment is not simulated; however, the guest programs are executed in their own isolated domains, as if they are running on a separate system. Guest programs need to be specifically modified to run in this environment. Ex; Sun VirtualBox, VMware Workstation, VMware Server and Microsoft Virtual PC

6 Comparing the 2 types of virtualization Hosted / Type 2 Dedicated / Type 1

7 Virtualization can be viewed in several categories Server OS virtualization Datacenter Virtualization Desktop virtualization Application virtualization Remote Desktop Services

8 Server Virtualization Vários servidores físicos são consolidados em poucos servidores virtuais. Alcunhado consolidacao P2V Imensos Benefícios de TI e de negócios são acompanhados com esta ideologia Exemplos: VMware ESX, MS Hyper-V, ou Citrix Xen

9 Storage virtualization Se podemos virtualizar servidores, porque não virtualizar o storage? Remove o mapeamento físico do storage e transforma o storage em unidades lógicas Estes objectos de unidades logicas (ou virtuais) são muito facilmente gerenciáveis. Imensos benefícios são adquiridos desta ideologia Custos de storage, fácil migração de dados, menos gerenciamento necessário

10 Storage virtualization

11 Network Virtualization Virtualização de redes internas providenciam funcionalidade de rede para software. Examplos: Redes virtuais da VMware ESX & Microsoft Hyper-V Virtualização de redes externas providenciam múltiplas funções de rede em apenas uma unidade. Examplos: um switch da Cisco com capacidade para VLAN ou aplicações integradas com virtualização.

12 Network Virtualization Network virtualization example

13 Application virtualization A virtualização das aplicações para que elas possam estar encapsuladas e correr em outros sistemas operativos sem a necessidade de instalação das mesmas Isto permite qualquer aplicação correr sem conflitos, usualmente via streaming Exemplos: VMware ThinApp, XenApp, and MS Softgrid Desktop virtualization Lifecycle

14 Desktop Virtualization virtualização de Desktop também chamado de VDI (Virtual desktop infrastructure) virtualização de Desktop é a consolidação de computadores destkop em sistemas de servidores virtualizados Exemplos: VMware VDM / View Citrix / XenDesktop Desktop virtualization example in an internal cloud

15 Virtualization products by Microsoft

16 Desktop Virtualization products by VMware

17 Server virtualization, in particular, is extremely popular among organizations of all sizes and types due to the compelling benefits it conveys. Organizations can substantially reduce server counts, in turn slashing: expenditures for hardware, administration, energy, facilities, and so forth.

18 Top Benefits 1. Help move things to the cloud 2. Extend the life of older applications 3. Isolate applications 4. Improve disaster recovery 5. Increase uptime 6. Reduce hardware vendor lock-in 7. Faster server provisioning 8. QA/lab environments 9. Reduce the data center footprint

19 Physical Machine Hard to move Difficult to copy Bound to a specific set of hardware Virtual Machine Easy to move and copy Encapsulated into files Independent of physical hardware Easy to manage Isolated from other virtual machines running on the same physical hardware Insulated from physical-hardware changes

20 OS and applications are freed from physical hardware Hardware maintenance is easier Fewer gotchas on hardware upgrade New options in disaster recovery It s easy to image a virtual machine Configure OS and applications once, clone many times Back up a virtual machine by backing up its few constituent files Many VMs can run on the same physical server Greater resource utilization Each is unaffected by the others Fine-grained tuning options

21 Challenge #1: Responsabilities Server virtualization blurs the responsibilities between formerly distinct IT disciplines.

22 Challenge #2: Server & Network Security How to protect Virtual Networks? How to protect Dynamic Networks?

23 Challenge #2: Server & Network Security Server virtualization changes the network and server security landscape in ways that no one yet fully understands

24 Challenge #2: Server & Network Security

25 Challenge #2: Server & Network Security

26 Challenge #2: Server & Network Security

27 Challenge #2: Server & Network Security Security Layers to consider (VMware vsphere ESXi): Virtual Machine Layer VMware Virtualization Layer Memory Hardening Kernel Module Integrity Trusted Platform Module (TPM) Virtual Networking Layer

28 Challenge #2: Server & Network Security

29 Challenge #2: Server & Network Security In a virtualized environment, some of the old concepts have to go Dynamically allocated virtual servers need dynamically allocated virtual security. One approach from a vendor is VMware's Vmsafe & VMware vshield Zones Firewall protection Traffic analysis Virtual Machine Discovery

30 Challenge #3: Complexity Server virtualization introduces new complexities and intricacies to existing change management procedures

31 VM sprawl Virtualization specific attacks Traditional threats

32 Virtualization has transformed the computing world It represents the ability to rapidly deploy new servers, maximum usage of hardware resources, and have a more streamlined computing environment. As more and more businesses rush to deploy virtual machines, they must also beware of the security issues specific to virtual environments. Keep your eyes wide open and be safe!

33 Application Layer Network Services Layer Virtual Networking Layer Virtualization Layer Hardware Layer

34 Is RAID a type of storage virtualization? Is VLAN a type of network virtualization? What Security measures must be taken in an virtualized environment? Thank you!