As we delve into the brand new Broadcom Benefit Accomplice Program with a number of cloud providers choices, VMware by Broadcom is thrilled to announce that VMware Cloud Director 10.6 is now obtainable as a part of the VCF (VMware Cloud Basis) providing, beginning June twenty seventh, 2024. This main launch brings new options and enhancements that can revolutionize your managed personal and public cloud choices.
Our relentless deal with multi-tier tenancy has led to the introduction of progressive capabilities and enhancements to present ones, offering you with unparalleled flexibility, scalability, and management. Whether or not you’re seeking to streamline your cloud operations or increase your attain, VMware Cloud Director 10.6 has received you lined.
On this newest replace, you’ll discover vital enhancements and new options within the following areas:
Three-Tier Tenancy
VMware Cloud Director permits cloud suppliers to ascertain a multi-layered organizational construction by way of the UI, generally known as the three-tier tenancy mannequin, to create sub-provider organizations with restricted administrative privileges over a particular set of tenants.
With this functionality, cloud suppliers can grant restricted entry to particular assets and providers inside their infrastructure, guaranteeing that every tenant has managed entry to solely the assets they want. This enhanced tenancy mannequin additionally allows larger scalability, flexibility, and safety, as cloud suppliers can simply handle and provision assets throughout a number of ranges of administration.
This progressive method allows cloud suppliers to undertake varied enterprise fashions, resembling:
- Create sub-provider organizations which facilitate nested multi-tenancy inside massive enterprise organizations, permitting them to create separate administrative hierarchies for various departments or subsidiaries.
- Resell cloud providers by way of companions or managed service suppliers.
This launch brings the three-tier tenancy functionality to all facets of assets and providers obtainable by way of VMware Cloud Director, making it an excellent resolution for cloud suppliers seeking to supply versatile and scalable cloud providers to their prospects.
Scale Limits
This launch brings vital most scale improve in a number of areas of the platform resembling:
- The utmost variety of VMs per VMware Cloud Director occasion has been elevated to 55,000, no matter energy state.
- The variety of concurrent distant consoles supported has been elevated to 22,000.
- The utmost variety of customers supported by the platform has been elevated to 300,000.
- The organizational mannequin for grouping Digital Information Heart Collections (Org VDCs) has been revamped to undertake a three-tier construction. Underneath this new design, the Sub-Supplier can now handle Information Heart Teams, which might accommodate as much as 2000 members (beforehand 16) and share networks and uplinks amongst them.
A number of VM and vApp Snapshots
VMware Cloud Director now gives enhanced flexibility in your digital machines and vApps with the power to take a number of snapshots per VM or per vApp, as much as a most quantity set by your cloud supplier.
By supporting a number of snapshots, VMware Cloud Director gives a extra environment friendly and versatile option to handle your digital machines, supplying you with larger management and confidence in your cloud infrastructure.
Content material Hub
Now, effortlessly handle and orchestrate your containerized functions and assets throughout the cluster with the enhancements made to the Content material Hub.
- Kubernetes cluster directors can now outline exact entry controls, granting particular person customers or teams tailor-made permissions to entry particular clusters, namespaces, or functions. This function allows a multi-tenant structure, permitting a number of organizations to securely coexist throughout the identical Kubernetes setting, every with their very own remoted namespace to deploy, handle, and govern their containerized workloads.
- A brand new model of the Content material Hub Operator has been launched, which runs natively throughout the Kubernetes cluster and makes use of WebSocket Protocol, for high-performance communication with VMware Cloud Director. The operator additionally gives real-time compatibility reporting to the Tenant Portal, enabling cluster house owners to make knowledgeable selections about when to improve to make sure seamless integration with VMware Cloud Director.
Distributed World Catalog
Enable for a world, multi-site cloud structure by enabling seamless entry to catalogs throughout a number of VMware Cloud Director (VCD) websites, offering a unified catalog expertise for tenants whatever the vCenter occasion or SDDC infrastructure. Leverage vendor-agnostic shared storage options (resembling NetApp, Dell, vSAN, and so forth.) to duplicate information and guarantee international consistency throughout the catalog.
A number of IDP Protocols and Native customers
VMware Cloud Director permits organizations to make the most of a number of identification supplier protocols (IDP), together with LDAP, SAML, and OpenId Join (OIDC), for a extra complete authentication method. By leveraging exterior identification suppliers, you’ll be able to profit from the newest developments in authentication expertise. It’s value noting that whereas native customers are nonetheless supported for analysis functions within the present launch, their use in manufacturing is being deprecated, and can proceed to be absolutely supported till the subsequent main launch of VMware Cloud Director.
Improved VM Template instantiation efficiency
When provisioning a VM template on a unique vCenter utilizing VMware Cloud Director, the system takes a two-pronged method to make sure environment friendly deployment. Initially, it makes an attempt to speed up the method by cloning the VM template immediately, leveraging the pace and effectivity of this technique. This method permits the system to quickly create a brand new VM occasion with out the overhead of exporting and importing the VM as an OVF file. Nevertheless, if the cloning operation encounters any points or errors, the system will routinely swap to a extra conventional technique, using OVF export/import to deploy the VM. This fallback method ensures that the provisioning course of is accomplished efficiently, even in instances the place cloning will not be potential.
Enhanced Encryption Administration
VMware Cloud Director 10.6 introduces a number of enhancements to the encryption administration function:
- A number of Key Suppliers could be registered concurrently, offering larger flexibility and scalability.
- The cluster title could be edited throughout key supplier publishing, permitting service suppliers to simply establish which key supplier belongs to which tenant.
- When authenticating a Key Supplier or registering a brand new key, customers can now go for producing a brand new key for every encryption operation, guaranteeing added safety.
- A brand new key rotation function has been launched, enabling computerized key rotation primarily based on configuration settings. This course of is non-disruptive and ensures seamless encryption.
- VMware Cloud Director 10.6 introduces a brand new function that enables customers to use totally different encryption insurance policies to totally different storage insurance policies, offering larger flexibility and customization of their encryption methods.
- When deleting an encryption coverage, VMware Cloud Director 10.6 now gives the choice to ‘Don’t re-encrypt’ beforehand encrypted information.
vSAN 4.1 NFS Help
VMware Cloud Director 10.6 now consists of help for vSAN 4.1 NFS, enabling safe file sharing with Kerberos authentication. This integration permits for the usage of vSAN 4.1 as a dependable and safe storage resolution, offering a further choice for file sharing inside your group.
Resolving CVE-2024-22272 Vulnerability
For extra data on this vulnerability and its influence on VMware by Broadcom merchandise, see VMSA-2024-0014.
IPv6 Help for VMware Cloud Director equipment nodes
VMware Cloud Director helps the deployment of equipment cells in IPv6 networks, enabling prospects to leverage the advantages of this contemporary networking protocol whereas sustaining compatibility with present infrastructure.
Customized Well being Monitor
As a part of our ongoing efforts to reinforce the person expertise, we’re introducing Customized Well being Displays as a complement to our present HTTP insurance policies. With this function, tenants can now monitor and troubleshoot varied well being traits of their load-balanced providers, together with metrics resembling response time, packet loss, and connection errors. This enables them to take proactive measures to keep up service reliability and responsiveness.
Avi Load Balancer Logging
With the brand new tenant-level Avi LB logging functionality, tenants and cloud suppliers can now achieve a deeper understanding of their Avi LB utilization. This function gives granular visibility into Avi LB exercise, enabling them to trace utilization patterns, triage occasions, and export logs for auditing, compliance, and regulatory functions.
Avi LB WAF
The Avi LB and Cloud Director integration opens up new alternatives for our prospects to ship value-added providers to their finish prospects. By integrating WAF safety features into their service portfolio, they will present enhanced safety towards web-based assaults, enhance buyer satisfaction, and strengthen their market place.
With the introduction of WAF, listed here are a few of the benefits:
- Improved safety: WAF helps shield towards web-based assaults, resembling SQL injection and cross-site scripting (XSS), by filtering incoming visitors and blocking malicious requests.
- Enhanced compliance: WAF might help organizations meet regulatory necessities by offering visibility into net visitors and permitting them to dam particular sorts of visitors or requests.
- Elevated buyer belief: By providing WAF as a value-added service, organizations can reveal their dedication to safety and construct belief with their prospects.
- Aggressive differentiation: WAF is usually a key differentiator for organizations seeking to stand out in a crowded market, because it gives a further layer of safety and safety.
IP Handle Administration
Vital upgrades have been made to IP Handle Administration, with a deal with simplifying IP reservations for workloads and allocating IP addresses to long-lived providers, resembling load balancer digital IPs. These enhancements are designed to align with a three-tier permission construction, offering a user-friendly expertise for managing IP deal with lifecycles, that are derived from IP swimming pools for tenants, sub-providers, and supplier personas.
IPsec VPN on Supplier Gateways and Edge Gateways
VMware Cloud Director has prolonged its IPsec VPN capabilities to incorporate tunnel institution on devoted supplier gateways. The up to date VPN administration framework is now structured right into a three-tier mannequin, permitting tenants, sub-providers, and suppliers to arrange and handle VPNs. With this enhanced functionality, suppliers can use Border Gateway Protocol (BGP) to manage which IP prefixes make the most of the VPN. Moreover, suppliers and sub-providers can automate BGP configuration for his or her tenants when utilizing IP Areas to handle community assignments for private and non-private addressing. Furthermore, suppliers and sub-providers can delegate particular BGP configurations to their tenants, offering larger flexibility and management.
New UX for deploying Avi Controllers and NSX Cloud Connectors
VMware Cloud Director 10.6 introduces vital enhancements to the provisioning of Avi Controllers and NSX Cloud Connectors, thereby boosting Avi LB scalability. The brand new person expertise (UX) allows directors to simply add extra Cloud Controllers to present Avi Controllers, permitting for elevated capability and efficiency. Moreover, the UX gives helpful insights into consumption metrics for Avi controllers, NSX cloud, and edge gateways, empowering directors to make knowledgeable selections about useful resource allocation and optimization.
Safety Log Ingestion
VMware Cloud Director has enabled log ingestion, seamlessly connecting to VMware Aria Operations for Logs. NSX Gateway Firewall and Distributed Firewall logs are actually routinely processed by VMware Aria Operations for Logs, offering easy accessibility to those logs by way of the tenant portal. This integration empowers tenants to shortly discover particular occasions utilizing filters and time ranges, and export logs to CSV information for additional evaluation and reporting.
Name To Motion:
- Get began with VMware Cloud Director 10.6 by downloading the newest model from right here.
- For detailed data on methods to use and configure VCD 10.6, please consult with the official documentation right here.
- For extra assets and details about VCD, go to the devoted VMware Cloud Director web page on vmware.com right here.
- To view the API information learn the legacy API information right here and the OpenAPI information right here.
Object Storage Extension 3.1
VMware Cloud Director Object Storage Extension model 3.1 introduces new options, together with:
- MinIO help for exterior Kubernetes clusters.
- Shopper IP forwarding for personalized bucket entry management.
- Enhanced Kubernetes Backup and Restore UI for higher visibility and administration.
- OSIS (Object Storage Interoperability Service) updates for S3-compliant storage distributors and asynchronous tenant onboarding.
Name To Motion: Obtain OSE 3.1 from right here and skim the OSE 3.1 documentation right here.
To share this weblog together with your friends and colleagues, please use this hyperlink: https://bit.ly/45mY62F