Welcome!

Virtualization Authors: Yeshim Deniz, Greg Ness, Elizabeth White, Mat Mathews, Pat Romanski

Related Topics: Cloud Expo, Virtualization, Web 2.0

Cloud Expo: Article

Breaking Through the Virtual Glass Ceiling

'Virtualization…all the cool, smart kids are doing it!'

"Virtualization...all the cool, smart kids are doing it!" Or at least that is the message being pushed by the virtualization vendors. Mostly this is a true statement. There are plenty of market studies that show that more than three quarters of medium to large enterprises are leveraging server virtualization technologies of some kind. What is not evident in that statement is that for most enterprises, their overall use of the technology is not as widespread as is implied by the statement. For many organizations, virtualization utilization is in its infancy (from a maturity of use perspective) or not a material percentage of the overall IT infrastructure.

Even with the exponential growth of virtualization usage over the last few years, the majority of applications have been based on simple consolidation ROI and used primarily in areas of low risk (IT assets, or test-development environments). Recently the term "VM Stall" has been thrown out along with some research that identifies some of the top reasons why organizations have initially deployed virtualization at a high rate but then significantly slowed that pace down - a virtual "glass ceiling" built on a number of common factors. The good news is that all of these concerns are addressable, and organizations can continue deploying virtualization and reap not only the simple consolidation ROI, but also start moving toward the operational efficiencies promised by utility or cloud computing. The following sections will outline some of the most common areas of concern and provide some guidance on how organizations can break through that ceiling and achieve their virtualization goals.

Cloud Confusion
Cloud computing (or the vendors pushing it) must take some responsibility for putting the brakes on virtualization deployments. For over a year now, VMware has transitioned their marketing towards "cloud." Every ecosystem software vendor has followed suit with some angle on how their software enables cloud. The problem is that companies that are not sophisticated virtualization users are getting confusing and sometimes conflicting messages not just about what cloud is, but how it can be used. The result of this is that some CIOs are pausing and looking at their virtualization efforts and then attempting to reconcile cloud. Do I even need cloud? When? Do my current virtualization plans conflict with or complement a cloud future? These are all valid questions that unfortunately end with answers like, "It depends." This in itself is not a bad idea, but because of the mixed messages around cloud, making an informed decision can be complicated. My suggestion for organizations that are stuck in cloud confusion: Move forward and keep virtualizing! There are enough benefits to virtualization technologies that warrant moving forward, and based on the road maps of the major hypervisor vendors, the ability to leverage cloud from existing virtualization deployments will be a key feature of each vendor's solution.

Security Concerns
Another key issue that prevents some applications from being deployed in virtual environments revolves around security and compliance. Applications such as health care and financial transactions that fall under regulatory control of HIPAA or PCI have been the ones most impacted by these concerns. Partially this is due to a lack of specific requirements (in the case of HIPAA) or ambiguous language (PCI DSS) in the documentation. The PCI Council has addressed the virtualization concerns in their latest release of the DSS [1] and in its accompanying guidance document,[2] which specifically clarifies that use of virtualization is not specifically excluded from PCI environments. There is also concern over virtualization being "different." Though it's true that virtualization is a new layer in the IT stack, all of the traditional security domains apply. Actions like Access Control, Network Inspection, Segmentation, and Separation of Duty are all required in the virtual datacenter. For some items, existing security measures and software will suffice. In addition, as virtualization has matured, the hypervisor vendors as well as the ecosystem have begun to offer solutions to address these areas with specific attention to the virtual domain. Though virtualization is somewhat different, it's not new security practices that need to be performed, it's new approaches to the same practices that may require virtualization-specific software and staff knowledgeable enough in both virtualization and the security domains to be able to apply the security concepts appropriately.

Staffing Issues
The staffing issue is next in the list of concerns that slow down adoption. It's not just in the security area that a specific virtualization skill set is needed. For many enterprises, virtualization knowledge is held within a small team. This team is independent of the other traditional data center groups of infrastructure, security, storage and software applications. But virtualization is unique in that the domain crosses all of those groups. The typical scenario is that even though an enterprise has been successfully growing the virtual environment (in both size and sophistication), the team may not be keeping pace. At some point the team will start to lose their ability to manage the environment to its fullest, which can manifest itself in a non-performing environment or a reluctance of the team to take on more applications; both slowing and stopping growth. A solution to preventing the situation is first to fully accept that successful virtualization requires a much greater cooperation between what were traditionally siloed technology groups. Something that is easier said than done, but an absolute necessity. This allows for shared responsibility and distribution of the management of portions of the virtual domain to groups better positioned to own these technologies. This will cause a trend toward the virtualization team becoming more architects and conductors of the virtual environment, while the day-to-day management is broken down into the sub-domain experts.

In addition to a shift in the datacenter management staff strategy, it's also important to leverage management tools that enable the cross-domain approach. The virtualization ecosystem is filled with software solutions tailored to specific problems or tasks. If there is no alternative, IT departments must purchase some very specific point solutions to solve problems. The downside to point solutions is that in quantity they become very cumbersome to manage. There can be a long learning curve for each product and the combined costs may also reach a point where the operational costs cut too deeply into the expected returns of virtualization. The large software vendors and some forward-thinking smaller vendors are aware of this issue. While large vendors are buying up the smaller point solutions to integrate into their management portfolio, small vendors are busy building virtualization-specific, cross domain management tools. Both approaches are valid as there are many knobs and dials in virtual management, and it's highly likely that different staff in very different roles will need to access the same controls and information. The choice is to buy different tools for each group, thus driving up operating expense, or deploying software designed for the virtual datacenter that provides both the consolidated management and domain-specific controls and views. When choosing the tools, look for real integration of the tool sets in both user interface and reporting. The power of such tools is the ability to leverage data across multiple control planes through a common interface.

There is strong evidence that enterprises reach a level of virtualization deployment that causes the process to slow down, and that cloud confusion, security and compliance, enterprise/staff maturity, and manageability are top on many CIO's minds. Virtualization and cloud computing are a paradigm shift. With that shift lies the commonality in all of the suggestions above, a change in approach and thinking for how datacenters are managed, that will enable organizations break through the virtualization glass ceiling.

References

  1. https://www.pcisecuritystandards.org/security_standards/documents.php
  2. https://www.pcisecuritystandards.org/documents/navigating_dss_v20.pdf

More Stories By Mike Wronski

Mike Wronski is Vice President of Product Management for Reflex Systems. He brings more than 15 years of industry experience to his role as VP of Product Management for Reflex Systems. Mike's broad IT experience, ranging from large carrier data networking to virtualization stems from previously held senior roles at Starent Networks(now part of Cisco), Cambia Networks, 3Com and USRobotics. Wronski holds a CISSP and Certified Ethical Hacker certifications, as well as an MBA, and a Bachelor of Science degree in Computer Engineering from Florida International University.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
The definition of IoT is not new, in fact it’s been around for over a decade. What has changed is the public's awareness that the technology we use on a daily basis has caught up on the vision of an always on, always connected world. If you look into the details of what comprises the IoT, you’ll see that it includes everything from cloud computing, Big Data analytics, “Things,” Web communication, applications, network, storage, etc. It is essentially including everything connected online from hardware to software, or as we like to say, it’s an Internet of many different things. The difference ...

ARMONK, N.Y., Nov. 20, 2014 /PRNewswire/ --  IBM (NYSE: IBM) today announced that it is bringing a greater level of control, security and flexibility to cloud-based application development and delivery with a single-tenant version of Bluemix, IBM's platform-as-a-service. The new platform enables developers to build ap...

Cloud Expo 2014 TV commercials will feature @ThingsExpo, which was launched in June, 2014 at New York City's Javits Center as the largest 'Internet of Things' event in the world.
An entirely new security model is needed for the Internet of Things, or is it? Can we save some old and tested controls for this new and different environment? In his session at @ThingsExpo, New York's at the Javits Center, Davi Ottenheimer, EMC Senior Director of Trust, reviewed hands-on lessons with IoT devices and reveal a new risk balance you might not expect. Davi Ottenheimer, EMC Senior Director of Trust, has more than nineteen years' experience managing global security operations and assessments, including a decade of leading incident response and digital forensics. He is co-author of t...
The major cloud platforms defy a simple, side-by-side analysis. Each of the major IaaS public-cloud platforms offers their own unique strengths and functionality. Options for on-site private cloud are diverse as well, and must be designed and deployed while taking existing legacy architecture and infrastructure into account. Then the reality is that most enterprises are embarking on a hybrid cloud strategy and programs. In this Power Panel at 15th Cloud Expo (http://www.CloudComputingExpo.com), moderated by Ashar Baig, Research Director, Cloud, at Gigaom Research, Nate Gordon, Director of T...
Explosive growth in connected devices. Enormous amounts of data for collection and analysis. Critical use of data for split-second decision making and actionable information. All three are factors in making the Internet of Things a reality. Yet, any one factor would have an IT organization pondering its infrastructure strategy. How should your organization enhance its IT framework to enable an Internet of Things implementation? In his session at Internet of @ThingsExpo, James Kirkland, Chief Architect for the Internet of Things and Intelligent Systems at Red Hat, described how to revolutioniz...
Technology is enabling a new approach to collecting and using data. This approach, commonly referred to as the "Internet of Things" (IoT), enables businesses to use real-time data from all sorts of things including machines, devices and sensors to make better decisions, improve customer service, and lower the risk in the creation of new revenue opportunities. In his General Session at Internet of @ThingsExpo, Dave Wagstaff, Vice President and Chief Architect at BSQUARE Corporation, discuss the real benefits to focus on, how to understand the requirements of a successful solution, the flow of ...
The security devil is always in the details of the attack: the ones you've endured, the ones you prepare yourself to fend off, and the ones that, you fear, will catch you completely unaware and defenseless. The Internet of Things (IoT) is nothing if not an endless proliferation of details. It's the vision of a world in which continuous Internet connectivity and addressability is embedded into a growing range of human artifacts, into the natural world, and even into our smartphones, appliances, and physical persons. In the IoT vision, every new "thing" - sensor, actuator, data source, data con...
"BSQUARE is in the business of selling software solutions for smart connected devices. It's obvious that IoT has moved from being a technology to being a fundamental part of business, and in the last 18 months people have said let's figure out how to do it and let's put some focus on it, " explained Dave Wagstaff, VP & Chief Architect, at BSQUARE Corporation, in this SYS-CON.tv interview at @ThingsExpo, held Nov 4-6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Focused on this fast-growing market’s needs, Vitesse Semiconductor Corporation (Nasdaq: VTSS), a leading provider of IC solutions to advance "Ethernet Everywhere" in Carrier, Enterprise and Internet of Things (IoT) networks, introduced its IStaX™ software (VSC6815SDK), a robust protocol stack to simplify deployment and management of Industrial-IoT network applications such as Industrial Ethernet switching, surveillance, video distribution, LCD signage, intelligent sensors, and metering equipment. Leveraging technologies proven in the Carrier and Enterprise markets, IStaX is designed to work ac...
"There is a natural synchronization between the business models, the IoT is there to support ,” explained Brendan O'Brien, Co-founder and Chief Architect of Aria Systems, in this SYS-CON.tv interview at the 15th International Cloud Expo®, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
C-Labs LLC, a leading provider of remote and mobile access for the Internet of Things (IoT), announced the appointment of John Traynor to the position of chief operating officer. Previously a strategic advisor to the firm, Mr. Traynor will now oversee sales, marketing, finance, and operations. Mr. Traynor is based out of the C-Labs office in Redmond, Washington. He reports to Chris Muench, Chief Executive Officer. Mr. Traynor brings valuable business leadership and technology industry expertise to C-Labs. With over 30 years' experience in the high-tech sector, John Traynor has held numerous...
Bit6 today issued a challenge to the technology community implementing Web Real Time Communication (WebRTC). To leap beyond WebRTC’s significant limitations and fully leverage its underlying value to accelerate innovation, application developers need to consider the entire communications ecosystem.
The 3rd International @ThingsExpo, co-located with the 16th International Cloud Expo - to be held June 9-11, 2015, at the Javits Center in New York City, NY - announces that it is now accepting Keynote Proposals. The Internet of Things (IoT) is the most profound change in personal and enterprise IT since the creation of the Worldwide Web more than 20 years ago. All major researchers estimate there will be tens of billions devices - computers, smartphones, tablets, and sensors - connected to the Internet by 2020. This number will continue to grow at a rapid pace for the next several decades.
The Internet of Things is not new. Historically, smart businesses have used its basic concept of leveraging data to drive better decision making and have capitalized on those insights to realize additional revenue opportunities. So, what has changed to make the Internet of Things one of the hottest topics in tech? In his session at @ThingsExpo, Chris Gray, Director, Embedded and Internet of Things, discussed the underlying factors that are driving the economics of intelligent systems. Discover how hardware commoditization, the ubiquitous nature of connectivity, and the emergence of Big Data a...
Almost everyone sees the potential of Internet of Things but how can businesses truly unlock that potential. The key will be in the ability to discover business insight in the midst of an ocean of Big Data generated from billions of embedded devices via Systems of Discover. Businesses will also need to ensure that they can sustain that insight by leveraging the cloud for global reach, scale and elasticity.
SYS-CON Events announced today that IDenticard will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. IDenticard™ is the security division of Brady Corp (NYSE: BRC), a $1.5 billion manufacturer of identification products. We have small-company values with the strength and stability of a major corporation. IDenticard offers local sales, support and service to our customers across the United States and Canada. Our partner network encompasses some 300 of the world's leading systems integrators and security s...
SYS-CON Events announced today that Windstream, a leading provider of advanced network and cloud communications, has been named “Silver Sponsor” of SYS-CON's 16th International Cloud Expo®, which will take place on June 9–11, 2015, at the Javits Center in New York, NY. Windstream (Nasdaq: WIN), a FORTUNE 500 and S&P 500 company, is a leading provider of advanced network communications, including cloud computing and managed services, to businesses nationwide. The company also offers broadband, phone and digital TV services to consumers primarily in rural areas.
IoT is still a vague buzzword for many people. In his session at @ThingsExpo, Mike Kavis, Vice President & Principal Cloud Architect at Cloud Technology Partners, discussed the business value of IoT that goes far beyond the general public's perception that IoT is all about wearables and home consumer services. He also discussed how IoT is perceived by investors and how venture capitalist access this space. Other topics discussed were barriers to success, what is new, what is old, and what the future may hold. Mike Kavis is Vice President & Principal Cloud Architect at Cloud Technology Pa...
Cloud Expo 2014 TV commercials will feature @ThingsExpo, which was launched in June, 2014 at New York City's Javits Center as the largest 'Internet of Things' event in the world. The next @ThingsExpo will take place November 4-6, 2014, at the Santa Clara Convention Center, in Santa Clara, California. Since its launch in 2008, Cloud Expo TV commercials have been aired and CNBC, Fox News Network, and Bloomberg TV. Please enjoy our 2014 commercial.