Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Cloud Foundation to Execute on Innovation

Cloud Foundation to Execute on Innovation

Presentation with VMware at the Gartner IT Infrastructure, Operations & Cloud Strategies Conference 2018 in London.
Video used in this presentation can be found at https://youtu.be/iT8wOeDu90o

Albert W. Alberts

November 26, 2018
Tweet

More Decks by Albert W. Alberts

Other Decks in Technology

Transcript

  1. Cloud Foundation to Execute on Innovation Albert W. Alberts -

    KPN Martijn Baecke - VMware November 26th 2018 London Gartner IT Infrastructure, Operations & Cloud Strategies Conference
  2. 14 14 Confidential │ ©2018 VMware, Inc. VMware Cloud The

    complete portfolio for the Multi-Cloud Journey Cloud Native Apps Time to market • Innovation • Scale • Differentiation Existing Apps Cost Management • Security • Reliability • Control VISIBILITY OPERATIONS AUTOMATION SECURITY GOVERNANCE CONTAINER MANAGEMENT VMware Cloud Services Hybrid Cloud Native Public Cloud CONTAINERS VIRTUAL MACHINES for VMware VMware Cloud on AWS Project Dimension KUBERNETES VM VMware Cloud Automation & Operations CONSISTENT OPERATIONS Management and Operations • Across Clouds CONSISTENT INFRASTRUCTURE Compute, Networking, Storage, and Security (VMs, Containers, XaaS) OPEN & FLEXIBLE DEVELOPER EXPERIENCE Open Source IaaS, PaaS, CaaS, FaaS • Tooling • Telemetry
  3. 15 Confidential │ ©2018 VMware, Inc. Digital Business Digital Business

    Requires a Digital Foundation To support the people, processes, apps, and data that power the business Consistent Infrastructure Consistent Operations Intrinsic Security People Modern Apps Processes Data Digital Foundation Adaptive. Resilient. Secure.
  4. KPN CloudNL VMware (VPC) How we enabled Digital Innovation …

    Albert W. Alberts, November 26th 2018 London Gartner IT Infrastructure, Operations & Cloud Strategies Conference
  5. Who am I … • KPN since Jan. 1999: –

    HetNet (ISP), VoIP, Comet (backend deployment), Bewaarplicht (email logging), Cloud DevOps, CloudNL VMware, API Store (Apigee) • Architect (with a software background) • KPN patents & pending • MeetUp organizations: – devNetNoord, – domoticaGrunn, – ManageIQ Albert W. Alberts Private Home automation (soft- & hardware), Bramble Swimming, Waterpolo, Cycling, Travelling Contact [email protected] @a_w_alberts www.linkedin.com/in/albertalberts
  6. Koninklijke KPN N.V. or Royal Dutch Telecom • Dutch landline

    and mobile telecommunications company • Mobile Network Operator (KPN- and TelfortMobile) • Mobile Virtual Network Operator (Simyo, Ortel Mobile) • Internet Service Provider • Multi-play services (Interactive Television, IPTV) • Wholesale services • ICT services in the Benelux or just KPN
  7. Koninklijke KPN N.V. or Royal Dutch Telecom • Dutch landline

    and mobile telecommunications company. • Mobile Network Operator (KPN- and TelfortMobile) • Mobile Virtual Network Operator (Simyo, Ortel Mobile) • Internet Service Provider. • Multi-play services (Interactive Television, IPTV). • Wholesale services • ICT services in the Benelux. or just KPN Consumer Services Business Services
  8. KPN ICT services One of the ICT Services … Managed

    Hybrid Cloud – an application centric service concept based on cloud infrastructure, networking, managed services and integrated compliance and security focused on delivering a true hybrid service fit for each application including 24/7 operational support. part of the department Business Services
  9. CloudNL characteristics: • Services delivered by KPN in Dutch datacenters;

    • Platform managed from within the Netherlands under Dutch law; • Cloud Compliance Framework assurance (CCF).
  10. CloudNL VMware, based on VMware technology • vRealize Automation; •

    vRealize Orchestration; • NSX; • vCenter & vSphere.
  11. vRealize Automation vRealize Orchestration Compute resources Networking resources Storage resources

    CloudNL VMware Portal ReST API What does the customer get? Interfaces
  12. vRealize Automation vRealize Orchestration Compute resources Networking resources Storage resources

    CloudNL VMware Portal ReST API What does the customer get? Interfaces Go Ruby Python C# enable Infrastructure as Code
  13. vRealize Automation vRealize Orchestration Virtual Machines Networking Backup Compute resources

    Networking resources Storage resources CloudNL VMware Portal API What does the customer get? Interfaces
  14. Tenant A Tenant A private IP private IP NSX Edge

    pair public IP public IP Tenant ESG Tenant ESG Perimeter ESG Perimeter ESG default GW Perimeter ESG Perimeter ESG Distributed Logical Router Tenant A ESG Tenant A ESG Distributed Logical Router VM VM VM VM VM VM VM VM transport network default GW default GW default GW transport network public network, without NAT(ting) private network, with sNAT(ting) Internet Datacenter 1 Datacenter 2 What does the customer get? Default network setup: front-end & back-end
  15. vRealize Automation vRealize Orchestration Compute resources Networking resources Storage resources

    CloudNL VMware Portal How does the customer get it? Order / Request
  16. vRealize Automation vRealize Orchestration Compute resources Networking resources Storage resources

    How does the customer get it? Order / Request flow Portal CloudNL VMware
  17. vRealize Automation vRealize Orchestration Compute resources Networking resources Storage resources

    How does the customer get it? Order / Request flow Portal € Billing
  18. vRealize Orchestration Compute resources Networking resources Storage resources How does

    the customer get it? Order / Request flow € Billing vRealize Automation Portal
  19. How Managed Hybrid Cloud evolved Virtual Private Cloud: – External

    customers – Internal customers: • IoT services • API Store • App Factory (ALM) • Digital (kubernetes) • interactive TV • … intended for external customers 2017 2018 customers internal customers external customers
  20. Why do internal customers choose the VPC platform? Virtual Private

    Cloud: – Avoid internal processes – Store sensitive data on premise – No “datacenter” responsibilities – Influence on the service(s) delivered – Easy to set up, easy to deploy – RBAC – Connectivity to internal services – … focus on things that matter
  21. Internal VPC platform References: • State of DevOps Report 2018

    – Stage 5: Provide self-service capabilities • ThoughtWorks Radar vol. 19 – Shared VPC pattern – Multi Account Cloud Setup pattern* a corporate evolution … TECHNIQUES TOOLS LANGUAGE & FRAMEWORKS PLATFORMS ADOPT TRIAL ASSESS HOLD HOLD ASSESS TRIAL ADOPT * CloudNL VPC offers multiple accounts with different roles
  22. KPN CloudNL VMware, the team • 1 Product Owner •

    3 OPS • 3 DEV • 1 Tester • 1 Architect who and how?
  23. KPN CloudNL VMware, service portfolio • Basic generic dual datacenter

    infrastructure • Standard OS images • Software Defined Networking (SDN) with VMware NSX • New services start with a Minimal Viable Product • Service request to add new services or service features • Extract services based on existing implementations • Direct contact with customers • Ease of use vs. full-featured services what and how?
  24. Service creation ease of use vs. full-featured services Generic Service

    feature feature feature feature Some customers
  25. Service creation ease of use vs. full-featured services Generic Service

    Service Module Service Module Service Module Service Module ease of use full-featured &
  26. NSX Load Balancers: “simple” vs advanced ease of use vs

    full-featured “simple” Load Balancer: one catalog item with multiple tabs Advanced Load Balancer: multiple catalog items with dependencies
  27. “Load Balancer” NSX Load Balancer: “simple” vs advanced Guided vs

    Reusable Building blocks Load Balancer Host Load Balancer Certificate Load Balancer Application Profile Load Balancer Load Balancer Health Monitor Load Balancer Application Rule Load Balancer Pool Load Balancer Pool Members Application Profile Health Check Certificates “simple” Load Balancer: one catalog item with multiple tabs General Advanced Load Balancer: multiple catalog items with dependencies tab Catalog item
  28. Structure of an advanced NSX Load Balancer Creation order Load

    Balancer Host Load Balancer Certificate Load Balancer Application Profile Load Balancer (service) Load Balancer Health Monitor Load Balancer Application Rule Load Balancer Pool creation order
  29. Tenant AWAlberts Tenant AWAlberts private IP private IP NSX Edge

    pair public IP public IP Tenant ESG Tenant ESG Perimeter ESG Perimeter ESG default GW Perimeter ESG Perimeter ESG Distributed Logical Router Tenant ESG AWAlberts Tenant ESG AWAlberts Distributed Logical Router VM VM transport network default GW default GW default GW transport network Internet Demo_01 Demo_02 Create an Internet-Facing Load Balancer Create an Internet-Facing Load Balancer with two VMs in the back-end Datacenter 1 Datacenter 2
  30. Tenant AWAlberts private IP public IP Tenant ESG Perimeter ESG

    default GW Perimeter ESG Distributed Logical Router Tenant ESG AWAlberts VM VM default GW transport network Internet Load Balancer Create NSX Load Balancer, with two nodes public IP Portal vRA, vRO Create an Internet-Facing Load Balancer Create an Internet-Facing Load Balancer with two VMs in the back-end Demo_01 Demo_02 Datacenter 1
  31. Datacenter 1 Tenant AWAlberts private IP public IP Tenant ESG

    Perimeter ESG default GW Perimeter ESG Distributed Logical Router Tenant ESG AWAlberts VM VM default GW transport network Internet Create NSX Load Balancer, with two nodes public IP Create an Internet-Facing Load Balancer Create an Internet-Facing Load Balancer with two VMs in the back-end Demo_01 Demo_02 Load Balancer Portal vRA, vRO Application Profile Health Check Certificates General Load Balancer Load Balancer Host Load Balancer Pool Health Monitor Application Profile
  32. Tenant AWAlberts private IP public IP Tenant ESG Perimeter ESG

    default GW Perimeter ESG Distributed Logical Router Tenant ESG AWAlberts VM VM default GW transport network Internet Load Balancer public IP: 145.128.67.82:3333 while true; do curl 145.128.67.82:3333 sleep 1 done Portal vRA, vRO Create an Internet-Facing Load Balancer Create an Internet-Facing Load Balancer with two VMs in the back-end Demo_01 Demo_02 VMs listening on port 3333 Datacenter 1
  33. Key takeaways • Setup a good architecture • Look at

    your portfolio from a user perspective • Start with a MVP (Pareto) • Automate