As we delve into the brand new Broadcom Benefit Associate Program with a number of cloud companies choices, VMware by Broadcom is thrilled to announce that VMware Cloud Director 10.6 is now accessible as a part of the VCF (VMware Cloud Basis) providing, beginning June twenty seventh, 2024. This main launch brings new options and enhancements that may revolutionize your managed non-public and public cloud choices.
Our relentless give attention to multi-tier tenancy has led to the introduction of progressive capabilities and enhancements to present ones, offering you with unparalleled flexibility, scalability, and management. Whether or not you’re seeking to streamline your cloud operations or increase your attain, VMware Cloud Director 10.6 has bought you lined.
On this newest replace, you’ll discover important enhancements and new options within the following areas:
Three-Tier Tenancy
VMware Cloud Director permits cloud suppliers to ascertain a multi-layered organizational construction via the UI, often called the three-tier tenancy mannequin, to create sub-provider organizations with restricted administrative privileges over a selected set of tenants.
With this functionality, cloud suppliers can grant restricted entry to particular assets and companies inside their infrastructure, making certain that every tenant has managed entry to solely the assets they want. This enhanced tenancy mannequin additionally permits better scalability, flexibility, and safety, as cloud suppliers can simply handle and provision assets throughout a number of ranges of administration.
This progressive strategy permits cloud suppliers to undertake varied enterprise fashions, corresponding to:
- Create sub-provider organizations which facilitate nested multi-tenancy inside giant enterprise organizations, permitting them to create separate administrative hierarchies for various departments or subsidiaries.
- Resell cloud companies via companions or managed service suppliers.
This launch brings the three-tier tenancy functionality to all elements of assets and companies accessible via VMware Cloud Director, making it a super answer for cloud suppliers seeking to supply versatile and scalable cloud companies to their clients.
Scale Limits
This launch brings important most scale improve in a number of areas of the platform corresponding to:
- The utmost variety of VMs per VMware Cloud Director occasion has been elevated to 55,000, no matter energy state.
- The variety of concurrent distant consoles supported has been elevated to 22,000.
- The utmost variety of customers supported by the platform has been elevated to 300,000.
- The organizational mannequin for grouping Digital Information Heart Collections (Org VDCs) has been revamped to undertake a three-tier construction. Below this new design, the Sub-Supplier can now handle Information Heart Teams, which may accommodate as much as 2000 members (beforehand 16) and share networks and uplinks amongst them.
A number of VM and vApp Snapshots
VMware Cloud Director now affords enhanced flexibility to your digital machines and vApps with the power to take a number of snapshots per VM or per vApp, as much as a most quantity set by your cloud supplier.
By supporting a number of snapshots, VMware Cloud Director gives a extra environment friendly and versatile option to handle your digital machines, providing you with better management and confidence in your cloud infrastructure.
Content material Hub
Now, effortlessly handle and orchestrate your containerized purposes and assets throughout the cluster with the enhancements made to the Content material Hub.
- Kubernetes cluster directors can now outline exact entry controls, granting particular person customers or teams tailor-made permissions to entry particular clusters, namespaces, or purposes. This characteristic permits a multi-tenant structure, permitting a number of organizations to securely coexist inside the similar Kubernetes atmosphere, every with their very own remoted namespace to deploy, handle, and govern their containerized workloads.
- A brand new model of the Content material Hub Operator has been launched, which runs natively inside the Kubernetes cluster and makes use of WebSocket Protocol, for high-performance communication with VMware Cloud Director. The operator additionally gives real-time compatibility reporting to the Tenant Portal, enabling cluster homeowners to make knowledgeable selections about when to improve to make sure seamless integration with VMware Cloud Director.
Distributed International Catalog
Permit for a worldwide, multi-site cloud structure by enabling seamless entry to catalogs throughout a number of VMware Cloud Director (VCD) websites, offering a unified catalog expertise for tenants whatever the vCenter occasion or SDDC infrastructure. Leverage vendor-agnostic shared storage options (corresponding to NetApp, Dell, vSAN, and so on.) to duplicate knowledge and guarantee international consistency throughout the catalog.
A number of IDP Protocols and Native customers
VMware Cloud Director permits organizations to make the most of a number of identification supplier protocols (IDP), together with LDAP, SAML, and OpenId Join (OIDC), for a extra complete authentication strategy. By leveraging exterior identification suppliers, you may profit from the most recent developments in authentication expertise. It’s value noting that whereas native customers are nonetheless supported for analysis functions within the present launch, their use in manufacturing is being deprecated, and can proceed to be absolutely supported till the following main launch of VMware Cloud Director.
Improved VM Template instantiation efficiency
When provisioning a VM template on a distinct vCenter utilizing VMware Cloud Director, the system takes a two-pronged strategy to make sure environment friendly deployment. Initially, it makes an attempt to speed up the method by cloning the VM template instantly, leveraging the pace and effectivity of this methodology. This strategy permits the system to quickly create a brand new VM occasion with out the overhead of exporting and importing the VM as an OVF file. Nevertheless, if the cloning operation encounters any points or errors, the system will mechanically change to a extra conventional methodology, using OVF export/import to deploy the VM. This fallback strategy ensures that the provisioning course of is accomplished efficiently, even in instances the place cloning is probably not doable.
Enhanced Encryption Administration
VMware Cloud Director 10.6 introduces a number of enhancements to the encryption administration characteristic:
- A number of Key Suppliers will be registered concurrently, offering better flexibility and scalability.
- The cluster identify will be edited throughout key supplier publishing, permitting service suppliers to simply establish which key supplier belongs to which tenant.
- When authenticating a Key Supplier or registering a brand new key, customers can now go for producing a brand new key for every encryption operation, making certain added safety.
- A brand new key rotation characteristic has been launched, enabling computerized key rotation primarily based on configuration settings. This course of is non-disruptive and ensures seamless encryption.
- VMware Cloud Director 10.6 introduces a brand new characteristic that permits customers to use totally different encryption insurance policies to totally different storage insurance policies, offering better flexibility and customization of their encryption methods.
- When deleting an encryption coverage, VMware Cloud Director 10.6 now gives the choice to ‘Don’t re-encrypt’ beforehand encrypted knowledge.
vSAN 4.1 NFS Assist
VMware Cloud Director 10.6 now consists of help for vSAN 4.1 NFS, enabling safe file sharing with Kerberos authentication. This integration permits for the usage of vSAN 4.1 as a dependable and safe storage answer, offering an extra possibility for file sharing inside your group.
Resolving CVE-2024-22272 Vulnerability
For extra info on this vulnerability and its impression on VMware by Broadcom merchandise, see VMSA-2024-0014.
IPv6 Assist for VMware Cloud Director equipment nodes
VMware Cloud Director helps the deployment of equipment cells in IPv6 networks, enabling clients to leverage the advantages of this contemporary networking protocol whereas sustaining compatibility with present infrastructure.
Customized Well being Monitor
As a part of our ongoing efforts to boost the person expertise, we’re introducing Customized Well being Screens as a complement to our present HTTP insurance policies. With this characteristic, tenants can now monitor and troubleshoot varied well being traits of their load-balanced companies, together with metrics corresponding to response time, packet loss, and connection errors. This permits them to take proactive measures to take care of service reliability and responsiveness.
Avi Load Balancer Logging
With the brand new tenant-level Avi LB logging functionality, tenants and cloud suppliers can now achieve a deeper understanding of their Avi LB utilization. This characteristic gives granular visibility into Avi LB exercise, enabling them to trace utilization patterns, triage occasions, and export logs for auditing, compliance, and regulatory functions.
Avi LB WAF
The Avi LB and Cloud Director integration opens up new alternatives for our clients to ship value-added companies to their finish clients. By integrating WAF security measures into their service portfolio, they will present enhanced safety in opposition to web-based assaults, enhance buyer satisfaction, and strengthen their market place.
With the introduction of WAF, listed here are a few of the benefits:
- Improved safety: WAF helps defend in opposition to web-based assaults, corresponding to SQL injection and cross-site scripting (XSS), by filtering incoming visitors and blocking malicious requests.
- Enhanced compliance: WAF will help organizations meet regulatory necessities by offering visibility into net visitors and permitting them to dam particular sorts of visitors or requests.
- Elevated buyer belief: By providing WAF as a value-added service, organizations can show their dedication to safety and construct belief with their clients.
- Aggressive differentiation: WAF generally is a key differentiator for organizations seeking to stand out in a crowded market, because it gives an extra layer of safety and safety.
IP Tackle Administration
Vital upgrades have been made to IP Tackle Administration, with a give attention to simplifying IP reservations for workloads and allocating IP addresses to long-lived companies, corresponding to load balancer digital IPs. These enhancements are designed to align with a three-tier permission construction, offering a user-friendly expertise for managing IP tackle lifecycles, that are derived from IP swimming pools for tenants, sub-providers, and supplier personas.
IPsec VPN on Supplier Gateways and Edge Gateways
VMware Cloud Director has prolonged its IPsec VPN capabilities to incorporate tunnel institution on devoted supplier gateways. The up to date VPN administration framework is now structured right into a three-tier mannequin, permitting tenants, sub-providers, and suppliers to arrange and handle VPNs. With this enhanced functionality, suppliers can use Border Gateway Protocol (BGP) to regulate which IP prefixes make the most of the VPN. Moreover, suppliers and sub-providers can automate BGP configuration for his or her tenants when utilizing IP Areas to handle community assignments for private and non-private addressing. Furthermore, suppliers and sub-providers can delegate particular BGP configurations to their tenants, offering better flexibility and management.
New UX for deploying Avi Controllers and NSX Cloud Connectors
VMware Cloud Director 10.6 introduces important enhancements to the provisioning of Avi Controllers and NSX Cloud Connectors, thereby boosting Avi LB scalability. The brand new person expertise (UX) permits directors to simply add extra Cloud Controllers to present Avi Controllers, permitting for elevated capability and efficiency. Moreover, the UX gives precious insights into consumption metrics for Avi controllers, NSX cloud, and edge gateways, empowering directors to make knowledgeable selections about useful resource allocation and optimization.
Safety Log Ingestion
VMware Cloud Director has enabled log ingestion, seamlessly connecting to VMware Aria Operations for Logs. NSX Gateway Firewall and Distributed Firewall logs are actually mechanically processed by VMware Aria Operations for Logs, offering quick access to those logs via the tenant portal. This integration empowers tenants to shortly discover particular occasions utilizing filters and time ranges, and export logs to CSV recordsdata for additional evaluation and reporting.
Name To Motion:
- Get began with VMware Cloud Director 10.6 by downloading the most recent model from right here.
- For detailed info on methods to use and configure VCD 10.6, please confer with the official documentation right here.
- For extra assets and details about VCD, go to the devoted VMware Cloud Director web page on vmware.com right here.
- To view the API information learn the legacy API information right here and the OpenAPI information right here.
Object Storage Extension 3.1
VMware Cloud Director Object Storage Extension model 3.1 introduces new options, together with:
- MinIO help for exterior Kubernetes clusters.
- Shopper IP forwarding for personalized bucket entry management.
- Enhanced Kubernetes Backup and Restore UI for higher visibility and administration.
- OSIS (Object Storage Interoperability Service) updates for S3-compliant storage distributors and asynchronous tenant onboarding.
Name To Motion: Obtain OSE 3.1 from right here and skim the OSE 3.1 documentation right here.
To share this weblog along with your friends and colleagues, please use this hyperlink: https://bit.ly/45mY62F
