As we delve into the brand new Broadcom Benefit Associate Program with a number of cloud providers choices, VMware by Broadcom is thrilled to announce that VMware Cloud Director 10.6 is now out there as a part of the VCF (VMware Cloud Basis) providing, beginning June twenty seventh, 2024. This main launch brings new options and enhancements that can revolutionize your managed personal and public cloud choices.
Our relentless deal with multi-tier tenancy has led to the introduction of progressive capabilities and enhancements to present ones, offering you with unparalleled flexibility, scalability, and management. Whether or not you’re trying to streamline your cloud operations or increase your attain, VMware Cloud Director 10.6 has bought you lined.
On this newest replace, you’ll discover vital enhancements and new options within the following areas:
Three-Tier Tenancy
VMware Cloud Director permits cloud suppliers to determine a multi-layered organizational construction by way of the UI, often called the three-tier tenancy mannequin, to create sub-provider organizations with restricted administrative privileges over a selected set of tenants.
With this functionality, cloud suppliers can grant restricted entry to particular sources and providers inside their infrastructure, guaranteeing that every tenant has managed entry to solely the sources they want. This enhanced tenancy mannequin additionally permits higher scalability, flexibility, and safety, as cloud suppliers can simply handle and provision sources throughout a number of ranges of administration.
This progressive method permits cloud suppliers to undertake numerous enterprise fashions, akin to:
- Create sub-provider organizations which facilitate nested multi-tenancy inside giant enterprise organizations, permitting them to create separate administrative hierarchies for various departments or subsidiaries.
- Resell cloud providers by way of companions or managed service suppliers.
This launch brings the three-tier tenancy functionality to all facets of sources and providers out there by way of VMware Cloud Director, making it a really perfect resolution for cloud suppliers trying to provide versatile and scalable cloud providers to their prospects.
Scale Limits
This launch brings vital most scale improve in a number of areas of the platform akin to:
- The utmost variety of VMs per VMware Cloud Director occasion has been elevated to 55,000, no matter energy state.
- The variety of concurrent distant consoles supported has been elevated to 22,000.
- The utmost variety of customers supported by the platform has been elevated to 300,000.
- The organizational mannequin for grouping Digital Knowledge Heart Collections (Org VDCs) has been revamped to undertake a three-tier construction. Beneath this new design, the Sub-Supplier can now handle Knowledge Heart Teams, which might accommodate as much as 2000 members (beforehand 16) and share networks and uplinks amongst them.
A number of VM and vApp Snapshots
VMware Cloud Director now gives enhanced flexibility on your digital machines and vApps with the flexibility to take a number of snapshots per VM or per vApp, as much as a most quantity set by your cloud supplier.
By supporting a number of snapshots, VMware Cloud Director gives a extra environment friendly and versatile strategy to handle your digital machines, supplying you with higher management and confidence in your cloud infrastructure.
Content material Hub
Now, effortlessly handle and orchestrate your containerized functions and sources throughout the cluster with the enhancements made to the Content material Hub.
- Kubernetes cluster directors can now outline exact entry controls, granting particular person customers or teams tailor-made permissions to entry particular clusters, namespaces, or functions. This function permits a multi-tenant structure, permitting a number of organizations to securely coexist inside the similar Kubernetes atmosphere, every with their very own remoted namespace to deploy, handle, and govern their containerized workloads.
- A brand new model of the Content material Hub Operator has been launched, which runs natively inside the Kubernetes cluster and makes use of WebSocket Protocol, for high-performance communication with VMware Cloud Director. The operator additionally gives real-time compatibility reporting to the Tenant Portal, enabling cluster homeowners to make knowledgeable choices about when to improve to make sure seamless integration with VMware Cloud Director.
Distributed World Catalog
Permit for a worldwide, multi-site cloud structure by enabling seamless entry to catalogs throughout a number of VMware Cloud Director (VCD) websites, offering a unified catalog expertise for tenants whatever the vCenter occasion or SDDC infrastructure. Leverage vendor-agnostic shared storage options (akin to NetApp, Dell, vSAN, and many others.) to copy knowledge and guarantee international consistency throughout the catalog.
A number of IDP Protocols and Native customers
VMware Cloud Director permits organizations to make the most of a number of identification supplier protocols (IDP), together with LDAP, SAML, and OpenId Join (OIDC), for a extra complete authentication method. By leveraging exterior identification suppliers, you’ll be able to profit from the most recent developments in authentication know-how. It’s price noting that whereas native customers are nonetheless supported for analysis functions within the present launch, their use in manufacturing is being deprecated, and can proceed to be absolutely supported till the following main launch of VMware Cloud Director.
Improved VM Template instantiation efficiency
When provisioning a VM template on a distinct vCenter utilizing VMware Cloud Director, the system takes a two-pronged method to make sure environment friendly deployment. Initially, it makes an attempt to speed up the method by cloning the VM template straight, leveraging the velocity and effectivity of this methodology. This method permits the system to quickly create a brand new VM occasion with out the overhead of exporting and importing the VM as an OVF file. Nevertheless, if the cloning operation encounters any points or errors, the system will robotically change to a extra conventional methodology, using OVF export/import to deploy the VM. This fallback method ensures that the provisioning course of is accomplished efficiently, even in circumstances the place cloning will not be doable.
Enhanced Encryption Administration
VMware Cloud Director 10.6 introduces a number of enhancements to the encryption administration function:
- A number of Key Suppliers will be registered concurrently, offering higher flexibility and scalability.
- The cluster title will be edited throughout key supplier publishing, permitting service suppliers to simply establish which key supplier belongs to which tenant.
- When authenticating a Key Supplier or registering a brand new key, customers can now go for producing a brand new key for every encryption operation, guaranteeing added safety.
- A brand new key rotation function has been launched, enabling computerized key rotation based mostly on configuration settings. This course of is non-disruptive and ensures seamless encryption.
- VMware Cloud Director 10.6 introduces a brand new function that enables customers to use totally different encryption insurance policies to totally different storage insurance policies, offering higher flexibility and customization of their encryption methods.
- When deleting an encryption coverage, VMware Cloud Director 10.6 now gives the choice to ‘Don’t re-encrypt’ beforehand encrypted knowledge.
vSAN 4.1 NFS Assist
VMware Cloud Director 10.6 now consists of assist for vSAN 4.1 NFS, enabling safe file sharing with Kerberos authentication. This integration permits for the usage of vSAN 4.1 as a dependable and safe storage resolution, offering a further choice for file sharing inside your group.
Resolving CVE-2024-22272 Vulnerability
For extra info on this vulnerability and its affect on VMware by Broadcom merchandise, see VMSA-2024-0014.
IPv6 Assist for VMware Cloud Director equipment nodes
VMware Cloud Director helps the deployment of equipment cells in IPv6 networks, enabling prospects to leverage the advantages of this contemporary networking protocol whereas sustaining compatibility with present infrastructure.
Customized Well being Monitor
As a part of our ongoing efforts to reinforce the person expertise, we’re introducing Customized Well being Displays as a complement to our present HTTP insurance policies. With this function, tenants can now monitor and troubleshoot numerous well being traits of their load-balanced providers, together with metrics akin to response time, packet loss, and connection errors. This enables them to take proactive measures to take care of service reliability and responsiveness.
Avi Load Balancer Logging
With the brand new tenant-level Avi LB logging functionality, tenants and cloud suppliers can now achieve a deeper understanding of their Avi LB utilization. This function gives granular visibility into Avi LB exercise, enabling them to trace utilization patterns, triage occasions, and export logs for auditing, compliance, and regulatory functions.
Avi LB WAF
The Avi LB and Cloud Director integration opens up new alternatives for our prospects to ship value-added providers to their finish prospects. By integrating WAF security measures into their service portfolio, they’ll present enhanced safety towards web-based assaults, enhance buyer satisfaction, and strengthen their market place.
With the introduction of WAF, listed below are a number of the benefits:
- Improved safety: WAF helps defend towards web-based assaults, akin to SQL injection and cross-site scripting (XSS), by filtering incoming visitors and blocking malicious requests.
- Enhanced compliance: WAF may help organizations meet regulatory necessities by offering visibility into internet visitors and permitting them to dam particular kinds of visitors or requests.
- Elevated buyer belief: By providing WAF as a value-added service, organizations can reveal their dedication to safety and construct belief with their prospects.
- Aggressive differentiation: WAF is usually a key differentiator for organizations trying to stand out in a crowded market, because it gives a further layer of safety and safety.
IP Deal with Administration
Vital upgrades have been made to IP Deal with Administration, with a deal with simplifying IP reservations for workloads and allocating IP addresses to long-lived providers, akin to load balancer digital IPs. These enhancements are designed to align with a three-tier permission construction, offering a user-friendly expertise for managing IP handle lifecycles, that are derived from IP swimming pools for tenants, sub-providers, and supplier personas.
IPsec VPN on Supplier Gateways and Edge Gateways
VMware Cloud Director has prolonged its IPsec VPN capabilities to incorporate tunnel institution on devoted supplier gateways. The up to date VPN administration framework is now structured right into a three-tier mannequin, permitting tenants, sub-providers, and suppliers to arrange and handle VPNs. With this enhanced functionality, suppliers can use Border Gateway Protocol (BGP) to regulate which IP prefixes make the most of the VPN. Moreover, suppliers and sub-providers can automate BGP configuration for his or her tenants when utilizing IP Areas to handle community assignments for private and non-private addressing. Furthermore, suppliers and sub-providers can delegate particular BGP configurations to their tenants, offering higher flexibility and management.
New UX for deploying Avi Controllers and NSX Cloud Connectors
VMware Cloud Director 10.6 introduces vital enhancements to the provisioning of Avi Controllers and NSX Cloud Connectors, thereby boosting Avi LB scalability. The brand new person expertise (UX) permits directors to simply add extra Cloud Controllers to present Avi Controllers, permitting for elevated capability and efficiency. Moreover, the UX gives worthwhile insights into consumption metrics for Avi controllers, NSX cloud, and edge gateways, empowering directors to make knowledgeable choices about useful resource allocation and optimization.
Safety Log Ingestion
VMware Cloud Director has enabled log ingestion, seamlessly connecting to VMware Aria Operations for Logs. NSX Gateway Firewall and Distributed Firewall logs at the moment are robotically processed by VMware Aria Operations for Logs, offering quick access to those logs by way of the tenant portal. This integration empowers tenants to shortly discover particular occasions utilizing filters and time ranges, and export logs to CSV recordsdata for additional evaluation and reporting.
Name To Motion:
- Get began with VMware Cloud Director 10.6 by downloading the most recent model from right here.
- For detailed info on the right way to use and configure VCD 10.6, please discuss with the official documentation right here.
- For extra sources and details about VCD, go to the devoted VMware Cloud Director web page on vmware.com right here.
- To view the API information learn the legacy API information right here and the OpenAPI information right here.
Object Storage Extension 3.1
VMware Cloud Director Object Storage Extension model 3.1 introduces new options, together with:
- MinIO assist for exterior Kubernetes clusters.
- Shopper IP forwarding for custom-made bucket entry management.
- Enhanced Kubernetes Backup and Restore UI for higher visibility and administration.
- OSIS (Object Storage Interoperability Service) updates for S3-compliant storage distributors and asynchronous tenant onboarding.
Name To Motion: Obtain OSE 3.1 from right here and skim the OSE 3.1 documentation right here.
To share this weblog together with your friends and colleagues, please use this hyperlink: https://bit.ly/45mY62F
