You are on page 1of 53

ADV1594BU

t i o n
Beyond The Marketing: i s tr ibu
or d
Horizon 7 Instant Clones t ion
bli c a
p u
Technical Deep Dive o t fo r
nt: N
o n te
17 C
2 0
w orld
V M
Oswald Chen
Jim Yanik

#VMworld #ADV1594BU
Disclaimer
• This presentation may contain product features that are currently under development.
• This overview of new technology represents no commitment from VMware to deliver these
features in any generally available product. t i o n
tribu
r dis purchase orders, or
• Features are subject to change, and must not be included in contracts,
o
sales agreements of any kind.
a t i on
c u b li
• Technical feasibility and market demand will affect o p
r final delivery.
o t f
• n
Pricing and packaging for any new technologiest : N or features discussed or presented have not
ont e
been determined.
17 C
2 0
o r ld
VMw

#ADV1594BU CONFIDENTIAL 2
Agenda

1 Instant Clones Overview


t i o n
2 Technical Overview
i s tr ibu
or d
t ion
3 Installation
bli c a
r p u
o t fo
4 N
Anatomy of an Instant Clone
nt:
o n te
5 What’s
1 7 C
New
d 2 0
r
o6l
V Mw Troubleshooting

3
t i o n
i s tr ibu
or d
Instant Clones Overview t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Platform
Instant-Clone Concepts
Leverages vmFork in vSphere 6.0 U1 and later
• Running parent VM is quiesced and “forked.”
t i o n
• Clones are customized in a powered-on state.
i s tr ibu
or d
• Enables disk-space and memory efficiency.
t ion
bli c a
pu per second on average.
• During the instant-cloning phase, one clone is created
r
o t fo
n t : N
Advantages over View Composer
ont e
C
d 017servers and VDI desktops.
• Faster provisioning of RDSH
2
or l
Mw maintenance and updating.
• Simpler and quicker
V
• No database required.
• Lighter load on vCenter Server.
JMP Technologies Eliminate Cost and Complexity

Ultra-fast Desktop
Provisioning ibution
i s tr
App
or d
Volumes
t ion
bli c a
r p u
o t fo Real-Time App
nt: N Delivery
onte
Instant
Clones
1 7 C
r ld 20
Mw oUser
V Environment
Management Contextual Policy
Management
t i o n
i s tr ibu
or d
Technical Overview t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Architecture

t i o n
Simple Architecture
t r i b u
Horizon Connection Server • Installs with Connection Server
r d is
• No Additional Server o noro Service
c a t i
• No Database
u l i
b information stored by vCenter
• Instant or p
Clone
Tomcat Server
t f
n t No
• : Stateless
on t e
1 7 C
Instant Clone Java Appld
r 20 vCenter Server Master Image
Mw o
V
Instant Clones versus View Composer
Composer Instant Clones

• Recompose, Refresh, Rebalance • Delete and Create new clone


t i o n
• Clone level CBRC • CBRC only for Replica
b u t ri
r d i s
• Composer Service • No separateoservice
a t i on
• Composer database • uNo c
blidatabase
o r p
No
• Long provisioning maintenance windows t f • New desktops provisioned in seconds after
e n t :
ont
– 2K VMs 4 hours to provision* priming
1 7 C – 2K VMs 40 minutes to provision*
• Provisioning operations
d 2 0very IO intensive
w o rl • Far lower disk IO load for provisioning
• VM
High vCenter Calls – Clone, multiple operations
power and reconfigure
• Fewer vCenter calls – Clone and Power

* Example- your mileage may vary


Limitations – We’ve Come a Long Way in a Year

t i o n
i s tr ibu
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
1 7 C
d 2 0
View Composer for RDSH Hosts
o rl
VMw
Instant Clone Limitations in Horizon 7.2

No Dedicated Desktop Pools t i o n


i s tr ibu
or d
t ion
bli c a Horizon 7.3
p u
View Composer for RDSH t f or Hosts
No IPv6 Support : N o
t e n t
C on
2 0 17
o r ld
VMw
No Sysprep support
ClonePrep

Change Machine Name

t i o n
i s tr ibu
or d
Change Machine Password
t ion
bli c a
r p u
o t fo
nt: N
Domain Join
o n te
17 C
2 0
w o rld
M
V License Activation
MS

No power operations required


t i o n
i s tr ibu
or d
Installation t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Requirements for Instant Clones
Infrastructure

• Horizon 7 or higher Broker t i o n


• Horizon 7 or higher Agent with Instant Clones i s tr ibu
or d
• vSphere 6.0u1 or higher
t ion
bli c a
r p u
o t fo
nt: N
o n te
Master VM
17 C
2 0
w o rld
• M
Virtual Hardware
V 11
• VMXNET3
• Windows 7 or Windows 10
• On Portgroup with Static Binding with fixed allocation ESXi 6 & vCenter 6.5 Issue
• Ephemeral Binding not supported KB - 2150925
Agent Installation

t i o n
ribu
ist select Instant Clones
d
Agent installrmust
o
i o n
OR Composer
t
b l i c a
r pu
o t fo Clone a Separate Master VM for
n t : N Composer
ont e
1 7 C
r ld 20
Mw o
V
Instant Clone Domain Admins

t i o n
i s tr ibu
View Configuration Menu Item
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
rld • Add Domain and User
V Mwo • Does not have to be Administrator
• Specific permissions documented
• Credentials will be verified at time of Add
t i o n
i s tr ibu
or d
Anatomy of an Instant Clone blication
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Provisioning Instant Clones
Priming: Image Push Cloning

t i o n Clone
Master Internal Replica Parent
i s tr ibu Instant
Template
o r d Delta Disk
n
atio
Delta Disk Full Clone Delta Disk Copy-on-Write

u b lic
rp
Linked Thin Linked Linked
Disk Snapshot Disk
t f o
Provisioned Disk Copy DiskCopy-

:N o on-Write

t e n t
on Parent VM Instant Clone

2 017 C
orl d
VMw
Memory
Copy
Active Memory Active Memory

COW
Page Shared
Memory
Instant Clone Components in vCenter
Master VM

t i o n
i s tr ibu
Template or d
t ion
bli c a
r p u
o t fo
Replica
nt: N
o n te
17 C
2 0
Parent
w orld
V M

Desktops
t i o n
i s tr ibu
or d
Instant Clones for RDSH t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Fast Provisioning of RDSH Servers with Instant Clones
Overview of RDSH Over JMP
• Instant Clone Technology foir RDSH servers.
t i o n
• AppStacks are attached when the App Volumes service starts on the RDSH
t r i b u server.
r d is
• Delivers JIT published apps and RDSH-based desktops.
o n o
c a t i
u b l i
or p
o t f
Benefits
n t : N
on t e
• Rapidly provision RDSH servers.
17 C
2 0
ld
• Adding servers to anorexisting RDSH farm happens in seconds.
VM w
• Maintenance windows can be brief, and some servers always available.
• Operating system updates no longer require a long recompose step on each server.
New Add Farm Wizard Options

t i o n
i s tr ibu
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w o rld
V M
• Requires an Instant Clone domain administrator.
• ClonePrep customizes the VMs, joins to domain without a reboot.
Add or Remove RDS Hosts from the Farm Instantly
• Priming process is done at farm creation.
• Or when farm is updated.
t i o n
ibu
– Active Parent VMs are created on each vSphere host.
i s tr
d
• Individual RDS Hostsorare Instant Clones
t i n
ocustomized
b l i
– Rapidly created,c a and available.
r p u
t
• Can
o foscale up or down existing farms rapidly by
n tent: Nediting the farm settings.
C o
0 17 • Set the minimum number of ready VMs to achieve
rld 2 rolling server updates when performing
V Mwo maintenance.
Immediate Maintenance
Overview
• A one off update or refresh of the RDSH farm.
• Use the same or a new Master snapshot. t i o n
• Can be Immediate or at a specific time. i s tr ibu
or d
• What Happens: t ion
bli c a
– Old RDS Hosts are deleted.
r p u
o t fo
– New Parent VMs are created if updating to a new snapshot.
nt: N
o n te
– New RDS Host Instant Clones are created.
1
– A minimum number of RDS Hosts7 C are kept available during
d 2 0
maintenance.
w o rl
V M
Benefits
• Push urgent security patches or updates.
• One off regeneration of the RDSH Instant Clones.
Recurring Maintenance
Automated Maintenance

• Scheduled Maintenance.
– Daily, weekly, monthly.
t i o n
• Regularly delete and recreate the RDSH Instant i s tr ibu
Clones. or d
t ion
– Can update to a new Master snapshot.
bli c a
r p u
o fo
– Subsequent times will use the same Master snapshot.
t
• A minimum amount of RDS Hosts are kept n t N
: available
ont e
during maintenance.
17 C
2 0
o r ld
Use case VMw
• Regularly regenerate the RDSH Instant Clones.
• Automatically keep RDSH farm at optimal condition.
Image Choice
• For both Immediate and Recurring
maintenance.
• Choose Master VM snapshot to use. t i o n
i s tr ibu
• Use current:
or d
t ion
– No push of Master to create new parents.
bli c a
– Old RDS Host VMs deleted. r p u
o t fo
– New RDS Host VMs created.
nt: N
o n te
• Use another snapshot: C
17
2 0
– r ld
Old RDS Host VMs deleted.
o
– New parents V
are
w
Mcreated on vSphere hosts.
– New RDS Hosts created.
t i o n
i s tr ibu
or d
Instant Clones – Multi-VLAN t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Enable Multi-VLAN support for Instant Clone pools
Support Tested Limits
• vSphere 2016 • No multi-VLAN provisioning n
t i o
• ESXi 6.0 U1 or newer
with IPv6.
i s tr ibu
o r d
• Virtual Distributed Switch only.
• Single IC pool of 2K VMs.
t io n
bli c a
– No support for Standard Switch. p u
t f or
: N o
tent
• Port Group must be configured
for Static Port Binding & Fixed on
1 7 C
Port Allocation.
r 20
ld
Mw o
– No support for Dynamic or
Ephemeral. V
• No dependency on Guest OS.
• Works with IC pools only.
– VDI or RDS
Enable Multi-VLAN support for Instant Clone pools
Overview Benefits
• Provides native support in Horizon • Create IC pools > size single subnet mask
Administrator for large IC pools. permits. t i o n
i s tr ibu
• Works with IC pools only. • Enabled in GUI.
or d
t ion
bli c a
– No more network label config file + PowerCLI.
r p u
o t fo
nt: N
o n te
17 C
2 0
w o rld
V M
Platform
Enable Multi-VLAN support for Instant Clone pools
Distribution Logic
x25 x25
• Multiple VLANs are
configured and t i o n
x25 x25 x25 t
x25r i b u
r dis
associated with port
groups.
on o
c a t i
• Free ports from each x25 x25 x25 u b li x25
or p x25 x25
DvsPortGroup is
o t f
determined, and VMs
e n t :N
x25
on t x50 x75 x25 x50 x75
are distributed
1 7 C
somewhat evenly, 20
starting with most w orld
free. IC Pool
VM 600 VMs

Port Group Port Group Port Group Port Group Port Group Port Group

VLAN1 VLAN2 VLAN3 VLAN1 VLAN2 VLAN3

vDS
Uplink Uplink
t i o n
i s tr ibu
or d
Instant Clones - vGPU t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Platform
Enable vGPU support on Instant Clones

Overview Requirements
• Deploy Instant Clones pools on
• vSphere 6.0 U1 or higher
u ti
with graphics acceleration
s i b
tronly.
• VDI desktop pools
r d i
using NVidia GRID cards.
o n o
– Farms
c a t i of RDSH desktop or
• GRID profile selected in
u b liapplications not yet supported.
Horizon pool creation wizard. or p
o t f • NVidia M-series cards only.
• Adds vGPU capability. e n t:N
on t • Blast Extreme
2 0 17 C – PCoIP (Tech Preview)
orl d
VMw
Platform
Enable vGPU support on Instant Clones

t i o n
i s tr ibu
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
o rld
VMw during pool creation
• GPU profile selected
must match profile in parent VM /
selected snapshot.
– Provisioning will fail without a match.
– Can be viewed in Broker in Horizon 7.2 or
later
vGPU Limitations
• GPU Profile of pool cannot be edited – pool must be re-created with new GPU profile

t i o n
i s tr ibu
or d
t ion
bli c a
• BLAST protocol only – PCoIP in Tech Preview r p u
o fo
t
• n t N
: host in cluster has “Group VMs on GPU until full”
ont e
1 GPU profile per ESXi cluster unless each esxi
set
17 C
2 0
o r ld
VMw
t i o n
i s tr ibu
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
t i o n
i s tr ibu
or d
Instant Clones - Operations t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Platform
vSphere Host Maintenance Mode with Instant Clones
Overview Benefits
• Automatically deletes Parent VMs when a • Simplify maintenance operations.
vSphere host goes into maintenance mode. t i o n
bu
• Remove previous manual step:
s t ri
• Change to Instant Clone Engine
r d
– InstantCloneMaintenance i = 1 on host
on o
– Works with any version of vSphere that a
annotation.
c t i
u b l i
supports vmFork.
f or pOr
– VUM DRS issue – requires manual process to o t
:N – Running IcMaint utility from Connection Server
delete parent VMs
ontent
17 C
d 2 0
orl
VMw

Can still be invoked manually with InstantCloneMaintenance custom


attribute on host in VSWC
Platform
Behavior to Expect
Enter Maintenance Mode Exit Maintenance Mode

• Parent VMs are powered off. tion


• Parent VMs are NOT recreated.
i b u
is t r
• Parent VMs are deleted.
o r d
• Parent VMs are created automatically when
needed.tion
• Clones are migrated to another host in the
b l i c a
cluster. –uE.g. a provisioning task.
p
r
N ot fo• DRS may rebalance the cluster.
ent :
ont
17 C
d 2 0
orl
VMw
Instant Clones & Machine Based Group Policies
• Machine based group policies often require a
reboot to take effect
Parent
t i o n Instant Clone
• Policy may APPEAR to be active – GPO updates
i s tr ibu Delta Disk
have added it to registry but policy NOT working. or d
Delta Disk Copy-on-Write
t ion
• Once the machine reboots, Computer based bli c a Linked Linked
p u Copy DiskCopy-
or
Disk
GPOs will be processed and take effect. o t f on-Write

n t : N
• Instant Clone Recover operation: on t e GPO still not
Parent VM Instant Clone

17 C
applied 2 0
o r ld
Mw the Instant Clone and forks a new one
– Recover deletes
V
from the running Parent VM Copy
Active Memory Active Memory
– Parent was not rebooted & the machine GPO was never
processed
– That state is copied to the new Instant Clone
Instant Clones & Machine Based Group Policies
Workflow for applying Computer based GPOs on Instant Clones

t i o n
ibu
i s tr OU for the
• Create/apply the new computer-based policy in the r d
target
n o
instant clone desktop c a t io
u b li
• Use the existing master VM or create o p
r a new one in vCenter.
o t f
• Shutdown the master VM inntvCenter : N Server and take a new snapshot
o n t e
of it in vCenter
1 7 C
• Push the new d 2 0 to update an existing pool or create a new pool
w o rl image
VMclones using the master VM
of instant

KB 2150495
Gratuitous Picture of a Yak

t i o n
i s tr ibu
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M

41
t i o n
i s tr ibu
or d
Troubleshooting t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Debug Mode
Overview
• Allows easier POC effort during trial and
t i o n
ibu
error phase
i s tr
• Internal VMs will not be protected when
or d
t ion
Debug Mode is turned on
bli c a
• Allows guest access to all internal VMs r p u
t fo
• Allows full rank of vSphere operations t: No
n t e n
(Power cycles, migration, deletion)
C o
0 7
1 recycle an
d
• Instant Clone Engine lwill
r 2not
o
w Debug Mode turned
VMhas
Internal VM that
on (Take your time to debug the problem)
• Turn Debug Mode ON or OFF on the
Master VM
Turn ON Debug Mode on Master VM
• Navigate to Master VM on vSphere • Create an entry “cloneprep.debug.mode”
• Edit Settings  VM Options  Advanced • Set it to “ON”
 Edit Configuration
tion
• No Need to Take a New Snapshot!
i b u
t r
or dis
a t i on
u bli c
or p
o t f
e n t:N
on t
1 7 C
r ld 20
Mw o
V
Turn On Debug Mode on Internal VMs
• After Debug Mode is Turned ON on the • All VM operations are now unprotected
Master VM, trigger an IC operation (create
a new desktop, logoff a user, publish an
t i o n
image, etc.)
i s tr ibu
• All internal VMs associate with that image or d
will be moved to debug state = “ON” t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w o rld
V M
Internal VM: Debug Mode ON vs OFF
• Debug OFF • Debug ON

t i o n
i s tr ibu
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
Turn OFF Debug Mode on Master VM
• Make sure Debug Mode is Turned OFF on
the Master VM when you are done
• Trigger an IC operation for it to be
t i o n
propagated down to the Internal VMs
i s tr ibu
• Otherwise Internal VMs won’t be recycled or d
t ion
by the Instant Clone Engine even when bli c a
r p u
they are not in use
o t fo
nt: N
o n te
17 C
2 0
w o rld
V M
Master VM / Target VM Networking Issue
• Be Aware of DNS entries on the Master VM if • Stale DNS entries from Master will carry over
the clones are going to be deployed on a to Internal VM and can cause the domain join
different network to fail
t i o n
i s tr ibu
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w o rld
V M
Microsoft KB for Win7 SP1 and Server 2008 R2 SP1
• Download and Install Microsoft KB3125574
• Internal Template Customization would fail
without this KB t i o n
t r i b u name
• If you see network
r d is adapter
difference
o n ofrom Master VM than you’ve hit
i
catbug
u lithis
b
or p
o t f
e n t:N
on t
17 C
Cross checking network adapter

d 2 0 between Master and Internal


orl Template
VMw
Troubleshooting - Logs

• Logs are written to debug logs on Connection


Servers
t i o n
• ProgramData >VMware>VDM>Logs
i s tr ibu
or d
• Search for: t ion
bli c a
• NGVC
r p u
• PendingOperation
o t fo
• RequestID
nt: N
o n te
17 C
2 0
w o rld
V M
All those Objects. . . All those GUIDs
How do we determine which templates, replicas and parents go together?

t i o n
i s tr ibu
or d
t ion
bli c a
Managed r p u
Object Browser – Only place to see
o
: ot f
correlations
N – Jedi difficulty level
n t
C onte Only really necessary for advanced troubleshooting –
0 1 7
l d 2 probably should involve GSS at that point
or
VMw Have something better coming. . .
t i o n
i s tr ibu
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M
t i o n
i s tr ibu
or d
t ion
bli c a
r p u
o t fo
nt: N
o n te
17 C
2 0
w orld
V M