| By Hezi Moore | Article Rating: |
|
| June 10, 2009 12:15 PM EDT | Reads: |
1,344 |
For example, virtual machines are typically connected to shared networks. Any virtual machine or group of virtual machines connected to a common network can communicate across those network links and can, therefore, still be the target of network attacks from other virtual machines on the network. As a result, administrators apply network best practices to harden the networks and isolate them to minimize the risks of data leaks from one virtual machine zone to the next across the network. The common approach used in implementing segmentation is the use of virtual local area networks (VLANs). This approach is based on VLANs providing almost all of the security benefits inherent in implementing physically separate networks. Two virtual machines in the network are unable to transmit packets back and forth unless they're part of the same VLAN. Proper segmentation of the virtual data center using VLANs requires careful planning of both the physical and the virtual network components. VLANs segmentation increases the network's complexity and creates environment dependencies between the physical and the virtual network.
Administrators require vigilant monitoring and tight coordination of configuration changes across both the virtual and physical network. A simple change to the VLAN configuration of the virtual infrastructure can impact the security level and the performance of VMs that will fail to perform the business task it was designed to do. Small variations of the initial configuration of the virtual network's VLANs structure or VLANs configuration changes to the physical network can produce large variations in the long-term behavior of the virtual and the physical environment. Just as Lorenz's Brazilian Butterfly has the potential to set off a tornado thousand of miles away, frequent changes that network VLAN configuration impose on the infrastructure can have serious consequences and negatively impact the security and performance of the entire data center.
Another example is VMotion migration technology, which adds a much needed dynamism to virtual environments. Virtual machines and their applications are moved between physical servers with features such as Distributed Resource Scheduling (DRS) and High Availability (HA) that are based on VMotion's enabling technology. DRS continuously optimizes resource allocations based on defined rules and resource utilization. The changes to resource allocation can be automatically executed by performing live migration of virtual machines through VMotion. The frequency of moves depends on the aggressiveness of the policy chosen. A more aggressive DRS implementation would set off a flurry of VM migrations on a frequent basis. Like Lorenz's Brazilian Butterfly, frequent changes that DRS imposed on the infrastructure can have serious consequences. If the butterfly hadn't flapped its wings and DRS stopped migrating VMs at such a high frequency, the trajectory of the system might have been vastly different. While neither the butterfly nor the DRS activities directly caused the tornado, the flap of its wings and the initial configuration of the virtual environment are an essential part of the initial conditions that presage disaster. Recurrence - the approximate return of a system toward its initial conditions - together with sensitive dependence on initial conditions are the two primary ingredients for chaotic motion.
The Butterfly Effect is a real phenomenon in virtual data centers that can increase risk, drive up costs, negatively affect availability, and fracture IT's credibility. Several core problems faced by nearly every large IT organization have magnified these burdens. Information about virtual configuration interdependencies is poorly understood, tracking it is inefficient, and mapping out a dynamic virtual infrastructure is a complicated and time-consuming endeavor. But organizations can mitigate these effects by automating their virtual infrastructure management.
IT organizations need a new breed of management tools that understands and takes advantage of virtualization's unique requirements and capabilities. Virtual Infrastructure Management is now being embraced by organizations around the world as a way of achieving large increases in availability and reliability for relatively modest investments in services and tools. Organizations implementing tools like Reflex' management solution for virtual environment have achieved these goals by reducing the time required to resolve problems, improving capacity planning, monitoring configuration changes, increasing business resiliency, and better managing their virtual data center assets. Those enterprises that have made the leap to effective Virtual Infrastructure Management no longer fear the winds of change or Lorenz's Butterfly Effect. Leveraging the Virtual Infrastructure Management tools, IT departments can evolve and add the following capabilities:
- Gain visibility and assert control across virtual environments. Since you can't control what you can't see, visibility is key in managing and monitoring the virtual infrastructure. Administrators need a visual representation of their virtual environment to understand the entire virtual network, track changes, and address virtualization challenges that have management implications.
- Track all infrastructure changes in real-time and maintain an accurate model of the virtual environment. With Virtual Infrastructure Management tools at their disposal, administrators can track changes to assets and alert stakeholders when critical assets are modified. In addition, the administrator has access to historical changes to identify unauthorized configuration changes, configuration errors, and enforce policies across the entire virtual infrastructure. Each time a change is detected, the change and all relevant details (who, when, why) are recorded
- Monitoring and managing virtual performance enables organizations to increase business efficiency and assure business continuity in the virtual data center. The ability to detect network bottlenecks inside the virtual infrastructure, identify over-utilized VMs, improve the performance of critical applications, and avoid network outages will allow administrators to improve the delivery of these critical applications, quickly troubleshoot issues, and optimize their virtual infrastructure.
From a philosophical standpoint, the Butterfly Effect provides a framework for understanding how seemingly small and inconsequential events can have radical consequences down the line. This theory can be applied to the virtual data center, a system that has become exponentially more complex and unpredictable as it grows in scope and gets beyond our direct control. While such systems will always possess a measure of uncertainty, we will require new tools and diagnostics that let us look deep into the black box.
Published June 10, 2009 Reads 1,344
Copyright © 2009 SYS-CON Media, Inc. — All Rights Reserved.
Syndicated stories and blog feeds, all rights reserved by the author.
More Stories By Hezi Moore
Hezi Moore is founder and Chief Technology Officer of Reflex Systems. He brings more than 15 years experience in security, networking and entrepreneurial expertise to Reflex Systems. In his role of CTO, he is responsible for shaping the company's technology strategy and defining the roadmap for future design and development of innovative, integrated network security solutions and delivering them to market. Moore led the effort to develop the industry's first Virtual Security Appliance (VSA) that provides visibility and security for virtual network infrastructure. Prior to founding Reflex Systems, Moore was president and co-founder of MicroTech Systems - a firm specializing in network design and configuration of point-of-sale systems - which was subsequently acquired by Retail Technologies International of Sacramento, California. He has also held such diverse occupations as a technical support and research analyst for GE Technology. Moore was a pioneer of the automated network intrusion response system, the concept out of which Reflex Systems grew.
- Kindle 2 vs Nook
- Why IBM’s Server Chief Got Busted
- Is Cloud Computing Like Teenage Sex?
- Industry Experts Discuss the State of Cloud Computing
- Performance Tuning Essentials for Java
- Confessions of a Ulitzer Addict
- Tactical Cloud Computing Panel at 1st Annual GovIT Expo
- It's the Java vs. C++ Shootout Revisited!
- Cloud Computing Can Revitalize Your Career as Software Developer
- IBM Could "Reinvent" Java: Mills
- Oracle & Cloud Computing: Exclusive Q&A with SVP Richard Sarwal
- A Brief History of Cloud Computing
- Kindle 2 vs Nook
- Cloud CEOs, CTOs & SVPs to Speak at 4th International Cloud Computing Expo
- Why IBM’s Server Chief Got Busted
- Is Cloud Computing Like Teenage Sex?
- Industry Experts Discuss the State of Cloud Computing
- Performance Tuning Essentials for Java
- The Difference Between Web Hosting and Cloud Computing
- Cloud Computing Expo: Exclusive Q&A with Yahoo! SVP Cloud Computing
- Ajax in RichFaces 3.3, JSF 2 and RichFaces 4
- Confessions of a Ulitzer Addict
- My Thoughts on Ulitzer
- Tactical Cloud Computing Panel at 1st Annual GovIT Expo
- A Cup of AJAX? Nay, Just Regular Java Please
- Java Developer's Journal Exclusive: 2006 "JDJ Editors' Choice" Awards
- The i-Technology Right Stuff
- JavaServer Faces (JSF) vs Struts
- Rich Internet Applications with Adobe Flex 2 and Java
- Java vs C++ "Shootout" Revisited
- Bean-Managed Persistence Using a Proxy List
- Reporting Made Easy with JasperReports and Hibernate
- Creating a Pet Store Application with JavaServer Faces, Spring, and Hibernate
- What's New in Eclipse?
- Why Do 'Cool Kids' Choose Ruby or PHP to Build Websites Instead of Java?
- i-Technology Predictions for 2007: Where's It All Headed?









































