VDI Smackdown! Author(s) : Ruben Spruijt Version: 1.22 Date: April 2011

Transcription

1 ! Author(s) : Ruben Spruijt Version: 1.22 Date: April 2011

2 2011 PQR, all rights reserved. All rights reserved. Specifications are subject to change without notice. PQR, the PQR logo and its tagline Eenvoud in ICT are trademarks or registered trademarks of PQR in the Netherlands and/or other countries. All other brands or products mentioned in this document are trademarks or registered trademarks of their respective holders and should be treated as such. Version 1.22 April 2011 Page i

3 CONTENT 1. Introduction Objectives Intended audience Vendor Involvement Contact About About PQR Acknowledgments Understanding all the application and desktop delivery solutions Introduction Trusted and untrusted Work Place Scenarios Secure Access Web Application Acceleration Connection Broker Application Streaming and Virtualization OS Provisioning Server-Hosted Virtual Desktop (VDI) Server-Hosted (Virtual) Desktop with GPU Acceleration Remote Desktop Services (RDS) Client-Side Desktop Virtualization (VDI) Client Management vendor matrix, who delivers what, Desktop Virtualization Introduction Types of Desktop Virtualization Overview of the Desktop Virtualization solutions VDI Strategy Vendors and their VDI Solution Introduction Citrix XenDesktop Kaviza Microsoft Virtual Desktop Infrastructure Quest vworkspace Oracle Virtual Desktop Infrastructure Virtual Bridges, VERDE VMware View Roadmap VDI features Comparison Product Version Feature Comparison Matrix Change Log Conclusion Version 1.22 April 2011 Page ii

4 1. INTRODUCTION If you are looking for an independent overview of the Server Hosted Desktop Virtualization (VDI) solutions and curious about the different features- and functions each Desktop Virtualization vendor is offering!? This is the whitepaper you definitely must read! In the current market there is an increasing demand for unbiased information about Desktop Virtualization solutions. This white paper is focused on solutions that are anticipated to have an important role in VDI deployments. An overview of available features of each solution is created to better understand each solutions capability. 1.1 OBJECTIVES The overall goal of this whitepaper is share information about: 1.2 INTENDED AUDIENCE Application- and Desktop Delivery Solutions overview; Explain the different Desktop Virtualization concepts; Explain the pros and cons of Virtual Desktop Infrastructure; Describe the different Virtual Desktop Infrastructure (VDI) vendors and solutions; Compare the features of the various VDI solutions; This document is intended for IT Managers, Architects, Analysts, System Administrators and IT- Pro s in general who are responsible for and/or interested in designing, implementing and maintaining Virtual Desktop Infrastructures. 1.3 VENDOR INVOLVEMENT All major vendors whose products are covered in the feature comparison, such as Citrix, Microsoft, Quest and VMware have been approached in advance to create awareness of this whitepaper and discuss the different features and functionality. 1.4 CONTACT PQR; Tel: +31 (0) info@pqr.nl ; Twitter: We try to provide accurate, clear, complete and usable information. We appreciate your feedback. If you have any comments, corrections, or suggestions for improvements of this document, we want to hear from you! Please send to Ruben Spruijt (rsp@pqr.nl) Include the product name and version number, and the title of the document in your message. THIS DOCUMENT IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND FOR REFERENCE PURPOSES ONLY COPYRIGHT PQR IT IS NOT ALLOWED TO (PARTIALLY) PUBLISH OR DISTRIBUTE CONTENT WITHOUT APPROVAL Version 1.22 April 2011 Page 1/38

5 2. ABOUT 2.1 ABOUT PQR PQR is the professional ICT infrastructure specialist with a focus on availability of data, applications and work spaces with optimized user experience in a secure and manageable way. PQR provides its customers innovative ICT solutions that ensure the optimization of application availability and manageability, without processes getting complex. Simplicity in ICT, that s what PQR stands for. PQR has traceable references and a wide range of expertise in the field, proven by many of our high partner statuses and certifications. PQR is Citrix Platinum Solution Advisor, HP GOLD Preferred Partner 2011, Microsoft Gold Partner Advanced Infrastructures & Security, NetApp Star Partner, RES Platinum Partner, VMware Premier Partner en Gold Authorized Consultant Partner, Cisco Premier Certified Partner, CommVault CASP Value Added Reseller, Dell Enterprise Architecture Certified Partner, HDS Platinum Partner, HP ProCurve Master Partner, Juniper J- Partner, Veeam Gold ProPartner, Quest Software Platinum Partner and Wyse Premier Partner. Customers of PQR are active in all segments of society and are classified as medium to large enterprises to whom ICT provisioning is vital for running business. Sales is realized in both profit and non-profit organizations, a significant part is realized within the healthcare sector, education and local and national government. PQR informs its clients as a Trusted Advisor about new technologies that keep ICT environments running even easier, creating secure optimal performance and information accessibility from any location or device. By using consolidation and virtualization techniques, PQR works towards an easy to use management environment. This not only applies to system administrators but also to users. PQR supports the new way of working with its Dynamic Datacenter concept and cloud computing abilities. PQR implements private cloud infrastructures where availability of data, applications and workplaces in a secure and manageable way is key, and also designs and implements a variety of desktop virtualization like server based computing, virtual desktop infrastructures (VDI), blade PC s and typical fat clients. In this way PQR is offering an ICT environment that increases productivity and entails significant cost decreases, not only in management but also in energy consumption. PQR provides an ICT infrastructure that is stable, flexible and future proof. PQR has extensive experience in designing and implementing server & storage environments, including networking and security. Traditionally, massive storage environments have been PQR s specialty. PQR s approach is based on four main pillars: Data & Systems Availability Application & Desktop Delivery Secure Access & Secure Networking Advanced IT Infrastructure Management The PQR approach is always transparent. To avoid common pitfalls of default configurations, only the best suitable solution will be selected, naturally in consultation with the client. During the whole process of designing up to implementation, PQR carries responsibility to deliver (part of) projects to its final result, as a rule against fixed prices and corresponding guarantees. PQR calls this Simplicity in ICT. PQR, founded in 1990, is headquartered in De Meern and counts over 100 employees. In fiscal year 2009/2010 posted sales of 70.4 million and a net after tax profit of 2.5 million have been recorded. Version 1.22 April 2011 Page 2/38

6 2.2 ACKNOWLEDGMENTS Team leader Ruben Spruijt, Technology Officer. Ruben Spruijt, born in 1975, studied Computer Science and started his career as a Systems Engineer at A-Tree Automatisering. He has been working as a Solutions Architect at PQR since Focusing on Server and Storage, Virtualization and Application Delivery solutions, PQR implements and migrates advanced ICT-infrastructures and has achieved the highest certifications of its most important partners: HP Preferred Partner Gold, Microsoft Gold Certified Partner, Citrix Platinum Solution Advisor, VMware Premier and Consultancy Partner. In his job, Ruben is primary focused on Application and Desktop Delivery, hardware and software Virtualization. Ruben has been awarded the Microsoft Most Value Professional (MVP), Citrix Technology Professional (CTP) and VMware vexpert titles. At various local and international conferences Ruben presents his vision and profound knowledge of Application and Desktop Delivery and Virtualization solutions. He is initiator of PQR s conceptual modes of Application and Desktop Delivery solutions and Data and System Availability solutions and originator of the solutions showcase of PQR. He has written several articles that have been published by professional magazines and informative websites. To contact Ruben directly send an to rsp@pqr.nl. Follow ruben on A-Team! Only through the effort and persistence of the VDI team we achieved the goals, a big thanks to them! Name Position Contact Role Twitter Rob Beekmans Consultant PQR rbe@pqr.nl Sven Huisman Consultant PQR shu@pqr.nl Olaf Voorhoeve Sr. Consultant PQR ovo@pqr.nl Peter Sterk Consultant PQR pst@pqr.nl Community effort Thanks to the reviewers and contributors, especially Jurjen van Leeuwen and Bjorn Bats, Carl Webster, Pim van de Vis, Arjan Beijer and Andrew Wood; Thanks! Special thanks A special thanks to Chris Wolf of Burton Group (a Gartner Company) for his insights, ideas and opinions with regards to Server-Hosted Virtual Desktops and this whitepaper. Burton Group created an In-Depth Research Assessment Server-Hosted Virtual Desktops with document ID: really worth reading. Follow Chris on Twitter Suggestions and improvements We did our best to be truthful and accurate in investigating and writing-down the different solutions. When you see improvements please let us know. You will be rewarded with eternal fame. Thank you for helping to make this whitepaper better by ing rsp@pqr.nl Version 1.22 April 2011 Page 3/38

7 3. UNDERSTANDING ALL THE APPLICATION AND DESKTOP DELIVERY SOLUTIONS 3.1 INTRODUCTION Before you do a deep dive in the Virtual Desktop Infrastructure arena, it s important to have an overview of all the Application- and Desktop Delivery solutions. PQR created the Application & Desktop Delivery Solutions Overview to provide a full at-aglance outline of the various application and desktop delivery solutions. Reading this chapter will give you a complete outline of the diagram and all the application and desktop solutions that are included in it. There are so many delivery solutions available on the market that - often due to a lack of knowledge - their functionalities are frequently confused. This paragraph does not aim to describe all application scenarios or their technical advantages and disadvantages, but to give a general idea of the state of affairs in the application and desktop delivery segment, independent of vendors. Figure 1, Application and Desktop Delivery Solutions Overview Version 1.22 April 2011 Page 4/38

8 3.2 TRUSTED AND UNTRUSTED WORK PLACE SCENARIOS Trusted work places are devices that are connected to the existing IT backend infrastructure via wired or wireless LAN/WAN. Untrusted work places are devices that do not have a secure wired or wireless LAN/WAN connection to the existing IT backend infrastructure or devices which aren t centrally managed by the IT department. This is, for example, equipment that is connected to a separate network segment for security reasons or because it is used from home or at a work experience location. Each organization has different work place and application delivery scenarios. For the IT department, it is important to have a good overview of the various work place and application delivery scenarios, since this indicates how the various users work with the applications or what their requirements are. 3.3 SECURE ACCESS Secure Access solutions provide secure access for untrusted devices to corporate IT. The two parts of the symbol stand for secure (the shield) and access (the traffic light). Depending on the chosen solution, secure access can also be fine-grained. The Secure Access solution can be a full-blow (SSL) VPN solution or a Gateway Services which is targeted for Server Hosted Desktops. Solutions that can be used to realize secure access scenarios include Cisco ASA, Citrix Access Gateway, Juniper SSL VPN, Microsoft Unified Access Gateway (UAG) and VMware View Security Server. 3.4 WEB APPLICATION ACCELERATION Web Application Acceleration appliances accelerate and secure web-architected applications. We are all confronted with these solutions nowadays: internet applications such as Google, MSN and ebay all use them. Web application acceleration solutions are not just useful for large organizations; however, you could also use them for your own web applications. Solutions that facilitate web application acceleration and security include packages such as Citrix Netscaler and F5 BigIP. 3.5 CONNECTION BROKER The connection broker determines which server-hosted remote desktop will be made available to the client. When using a server-hosted virtual desktop infrastructure for this, it is possible to either designate dedicated desktops or a pool of remote desktops. The desktop broker can automatically create, remove or pause remote desktops. There are a number of connection broker suppliers. Citrix with XenDesktop, Microsoft with Remote Desktop Services, and VMware with View are the best-known total solutions. Depending on the supplier, the connection broker may have additional functions, such as a web interface that can create secure (SSL) connections to remote desktops, Directory Services integration, Full USB support, support for various display protocols and integration with Remote Desktop Services (former Terminal Services). Depending on the rules, it is possible to execute applications centrally on a server-hosted VDI or on a terminal server. 3.6 APPLICATION STREAMING AND VIRTUALIZATION Through application streaming and virtualization, Microsoft Windows applications can be used without changing the local operating system or installing application software at a particular Version 1.22 April 2011 Page 5/38

9 work place. In other words; the application can be executed as if it had been installed locally and can save data and print without the need of any modifications to the local client. Resources such as the CPU, memory, hard disk and network card take care of the execution of these applications. Application Streaming and Virtualization can make applications available to desktops, laptops, server-hosted VDIs and Remote Desktop Services (TS) platforms. The applications are executed on a client platform, without needing to modify the platform. The advantages of Application Virtualization include: installation, upgrade, roll-back, delivery speed and the ease of application support (management). Installation of applications is no longer necessary, eliminating the possibility of conflicts. The result is a dynamic application delivery infrastructure. Application Streaming and Virtualization solutions include: Citrix (XenApp) Application Streaming, Microsoft App-V, Symantec Workspace Virtualization, Spoon and VMware ThinApp. 3.7 OS PROVISIONING OS Provisioning allows workstations to boot up and run from a central image. A single image can be used simultaneously by multiple workstations. The advantage of this is that complete operating systems, including applications and clients, can be made available quickly and securely. It is possible to make a single image available to multiple VDIs, RDS and physical desktop environments without causing conflicts. As a result, it is possible to upgrade or roll-back an OS quickly, simply, and without significant risks. When virtual desktops use OS streaming, (valuable) storage is saved, and the management of virtual desktops becomes relatively simple. This means that virtual or physical machines using OS Provisioning can become stateless devices. Citrix Provisioning Services, part of the XenDesktop and XenApp family, Doubletake Flex, Wanova Mirage, Wyse Streaming Manager (WSM) and the VMware View Composer are solutions that facilitate OS Provisioning. 3.8 SERVER-HOSTED VIRTUAL DESKTOP (VDI) VDI, Virtual Desktop infrastructure = Dedicated Virtual Desktop There are two kinds of VDI: server-hosted and client-side. A Server-Hosted Virtual Desktop Infrastructure (VDI) is a dedicated remote desktop solution providing remote access to Windows XP/Vista/Win7 or Linux desktops. The virtual machines are run from within the data center. The virtual infrastructure increases the system s independence, availability and manageability. The implementation of Server-Hosted VDIs means that desktops are no longer bound to a location or end-user appliance. Each user has their own unique, personalized, fully independent work place. Programs run and data is processed and stored on a centralized personal desktop. The information is sent to the client screen via a remote display protocol such as Microsoft RDP, Citrix ICA/HDX, Teradici/VMware PC-over-IP, SPICE or VNC. The protocol used for displaying the correct information depends on the operating system, bandwidth, the type of application, and the technical facilities. As with other desktop delivery solutions, VDI consist of various infrastructure components that facilitate management, load balancing, session control and secure access to virtual work stations. Microsoft, Citrix, Kaviza, Quest, Oracle, Virtual Bridges, RedHat and VMware are all important suppliers within the server-hosted VDI segment. 3.9 SERVER-HOSTED (VIRTUAL) DESKTOP WITH GPU ACCELERATION The Graphical Processor Unit (GPU) acceleration functionality can be added to the serverhosted VDI solution. It provides each (virtual) machine with enough graphic performance to run multimedia, 2D/3D, NextGen and Unified Communications. Version 1.22 April 2011 Page 6/38

10 Display data is presented to the client device via an optimized remote display protocol. To ensure that the end-users experience the best possible performance, the bandwidth, latency, or local (software) components have to meet extra requirements. Citrix HDX 3DPro, Microsoft RemoteFX and Teradici are (upcoming) products/solutions in this space REMOTE DESKTOP SERVICES (RDS) Remote Desktop Services (formerly known as Terminal Services) where every user has his or her unique terminal server session. Terminal Services is a solution for the remote access to desktops and applications that are run on a terminal server in a data center, Access to the desktop or application is not tied to a location or end-user machine, and programs are executed centrally on the terminal server. The data appears on the client screen through a remote display protocol such as Microsoft RDP or Citrix ICA/HDX. Remote Desktop Services consists of various infrastructure components for management, load balancing, session control and support. It has the advantage that applications are made available quickly and securely, the TCO is low, and applications can be accessed irrespective of location or work place. Suppliers of Remote Desktop Services include Citrix, Ericom, Microsoft and Quest CLIENT-SIDE DESKTOP VIRTUALIZATION (VDI) Client-side VDI is a dedicated local desktop where the virtual machines run locally on the client device. The hypervisor ensures that each virtual machine is hardware-independent, and makes it possible to simultaneously use a number of virtual machines at the same workstation. The hypervisor plays an essential part in client-side VDI solutions. There are two kinds of Client-side Desktop Virtualization solutions: the client-hosted (type#2) hypervisor is installed and runs as an application on the operating system (be that Windows, Mac OS X or Linux) of the end device. The bare-metal (type #1) client hypervisor acts as the device s base operating system and must be installed before other operating systems. The main differences between type#1 and type#2 hypervisors are hardware support, performance, manageability and end-user experience. Citrix XenClient and Virtual Computer NxTop are Type #1 or bare-metal Client Virtualization Platform (CVP). Microsoft VirtualPC and MED-V, MokaFive, Parallels Desktop, Sun VirtualBox and VMware ACE/Fusion and VMware View Client with Local Mode are Type #2 or client-side VDI solutions CLIENT MANAGEMENT Any self-respecting professional IT organization is bound to use a Client Management solution, as it is needed to facilitate things such as OS deployment, patch management application and client deployment, asset management, service desk integration, and remote control. Examples of client management systems are Altiris Deployment Solution, IBM BigFix, LANdesk Client Management, Microsoft System Center Configuration Manager (SCCM), Novell ZENworks and RES Automation Manager. Version 1.22 April 2011 Page 7/38

11 3.13 VENDOR MATRIX, WHO DELIVERS WHAT, In this whitepaper various vendors are mentioned. A vendor overview is provided in this matrix. Vendor Product Solution Citrix XenDesktop SH-VDI Kaviza VDI SH-VDI Microsoft VDI with RemoteFX SH-VDI RedHat Enterprise Desktop Virtualization SH-VDI Quest vworkspace SH-VDI Virtual Bridges VERDE SH-VDI VMware View SH-VDI Teradici PCoverIP SH- Physical Desktops HP Remote Graphics Software SH- Physical Desktops Citrix XenDesktop HDX3D Pro SH- Physical Desktops Citrix XenClient Client-side vdesktop #1 Virtual Computer NxTop Client-side vdesktop #1 Virtual Bridges VERDE Client-side vdesktop #1 Microsoft MED-V Client-side vdesktop #2 VMWare ACE/Fusion/Workstation Client-side vdesktop #2 Double Take Flex OS Provisioning Citrix Provisioning Services OS Provisioning Wyse Streaming Manager (WSM) OS Provisioning Microsoft Windows Server 2008R2 RDS Citrix XenApp RDS Quest vworkspace RDS Cisco ASA Secure Access Citrix Access Gateway Secure Access Microsoft Unified Access Gateway Secure Access Juniper SA Secure Access Citrix Application Streaming Application Virtualization Microsoft App-V Application Virtualization Symantec Workspace Virtualization Application Virtualization Spoon Spoon Application Virtualization VMware ThinApp Application Virtualization IBM BigFix Client Management LANDesk Client Management Suite Client Management Microsoft System Center Config Manager Client Management Novell ZenWorks Client Management RES Automation Manager RunBook Automation Version 1.22 April 2011 Page 8/38

12 4. DESKTOP VIRTUALIZATION In the previous chapter an overview of all the Application and Desktop Delivery solutions were explained. In this chapter Desktop Virtualization, server-hosted and client-side, is described. 4.1 INTRODUCTION Making applications available to the end-user, regardless of the technology being used, is the ultimate strategic objective of an Advanced ICT infrastructure. The Virtual Desktop (vdesktop) is an essential component in the range of Application and Desktop delivery solutions and in essence, provides the following functions: Flexibility: Detach the vdesktop from the endpoint; Several vdesktops next to one another Access: vdesktop works independently of location, endpoint and network; Uniform workstation Security: Server Hosted VDI; data in the computing center Freedom: Every user has their own desktop with administrator access when needed; Management: Hardware-independent image Legacy: It is simple to offer legacy applications on a state-of-the-art platform Sustainability: Power Management, handling the necessary resources in an efficient manner 4.2 TYPES OF DESKTOP VIRTUALIZATION Desktop Virtualization is the detachment of the desktop, the operating system and the end-user applications from the underlying endpoint or device. This kind of virtualization can be subdivided into two types: With the first type of virtualization, the end-user applications are executed remotely, server hosted, and presented at the endpoint via a Remote Display Protocol. With the second type of Desktop Virtualization solution, the applications are executed at the endpoint, client-side, and presented locally on this workstation. If we study the two virtualization concepts in more detail, five different types of Desktop Virtualization can be identified, these include: Client-side (executed locally) bare-metal (type #1) client hypervisor Client-side (executed locally) client-hosted (type #2) hypervisor Server-hosted (executed remotely) shared desktop (RDS) Server-hosted (executed remotely) personal virtual desktop (VDI) Server-hosted (executed remotely) personal physical desktop (BladePC) Version 1.22 April 2011 Page 9/38

13 A graphic overview of the five different desktop virtualization solutions is shown here: Figure 2; Desktop Virtualization overview 4.3 OVERVIEW OF THE DESKTOP VIRTUALIZATION SOLUTIONS The five different Desktop Virtualization solutions are outlined in the following paragraphs Remote Desktop Services (RDS) Desktop Virtualization, by means of Server hosted shared remote desktops, is a solution for gaining remote access to desktops and applications that are executed on a Remote Desktop Server (RDS) in the data center. Access to the desktop or application is not connected to a location or end-user equipment and the execution of the programme takes place centrally on the server. The information appears on the client's screen via a remote display protocol such as Microsoft RDP or Citrix ICA/HDX. Every user has his own desktop session but shares the computer platform with other users. Other frequently used terms for this type of desktop virtualization include the following: Terminal Services, Remote Desktop Servers (RDS) and Session or Presentation Virtualization. Suppliers of Server hosted shared remote desktops solutions include, for example, Microsoft, Citrix (XenApp) and Quest (vworkspace). The Remote Display Protocol of Windows Server 2008R2 is comparable with that of Windows 7. It is, for example, possible to use Windows Media Player, SilverLight, Flash and DirectX with the Microsoft RDP7 protocol and experiences with this have been positive (especially in a LAN environment) Server Hosted Virtual Desktop (VDI) Server hosted Personal Remote Virtual Desktops is a solution for gaining remote access to Windows 7 or legacy Windows XP desktops that are executed on a virtual machine in the datacenter. The Virtual Infrastructure ensures availability and manageability. Other frequently used terms for this type of desktop virtualization include the following: Virtual Desktop Infrastructure (VDI) or Server Hosted Virtual Desktops (SH-VDI). The use of Server hosted VDI does not require the Windows XP/7 vdesktop to be connected to a location or item of end-user equipment. Each user has their own, unique/personal and completely isolated workstation. Version 1.22 April 2011 Page 10/38

14 Program execution, data processing and data storage take place centrally on the personal desktop. The information is displayed on the client s screen via a remote display protocol such as Microsoft RDP, Citrix ICA/HDX or VMware PC-over-IP, to name but a few. Suppliers of overall solutions for Server Hosted Personal Virtual Remote Desktops include, for example, Citrix (XenDesktop), Microsoft (RDS), Quest (vworkspace), VirtualBridges (Verde) andvmware (View) Stateless and stateful Desktops Stateless and stateful are essential terms, especially in relation to server-hosted remote personal desktops. It is important to understand what these two terms mean. Stateless Desktops: a stateless virtualized desktop is and will always revert to its original state. All machine-related modifications, for example applications that are installed by a user, are removed when the user logs off. User-specific settings that are recorded in the user profile, however, can be stored and re-used. In addition to the above-mentioned benefits of Desktop Virtualization, stateless desktops also offer the following specific properties: The simple roll-out and update of basic images A virtual desktop is guaranteed to be 100% identical The user always has the same (clean) workstation Less effort is required by the management team due to the standardization of images. Other names for stateless desktops include: pooled, non-persistent or standard desktops. Stateful Desktops: allows the user to have the freedom to install software, and make workspace-related adjustments by saving changes i.e. the state of the workspace, between sessions. Stateful desktops are typically assigned to a specific user. Different terms include assigned, persistent or private desktops. A stateful desktop therefore has the following specific properties: Freedom to install software within the desktop Maintaining all changes to the operating system between reboots An important aspect regarding stateful desktops is the fact that the roll-out phase, update, upgrade and security of the operating system and the applications is less simple to manage than with the stateless desktops. The impact on (central) storage is also greater than with stateless desktops. De-duplication on the storage array can reduce the storage capacity footprint. Use stateless or stateful!? So, which is better, stateless or stateful?! The answer to this question depends on the functionality that the end-users require and the impact of this functionality on the ICT department. Version 1.22 April 2011 Page 11/38

15 4.3.4 Server-Hosted (virtual) Desktop with GPU Acceleration, Blade-PC An optimum experience has not yet been gained by the end-user with Remote Desktop Services and Server Hosted VDI when using graphic intensive 2D/3D, NextGen and Unified Communications applications. A significant reason for this is the fact that the presence of graphic processor power is lacking in the (current) virtual desktop. The server hosted personal remote physical desktop is the solution and offers users remote access to Windows 7 or legacy Windows XP desktops. These desktops are executed on a physical machine in the data center. Costly blade (professional) workstations, or blade-pcs, are frequently used for the physical machines. The GPU in each blade ensures that every vdesktop is equipped with sufficient graphic processing power in order to be able to execute multimedia, 2D/3D, NextGen and Unified Communications applications. Monitor information is presented on the endpoint device via an optimized remote display protocol. In order to be able to present the information with the enduser gaining the best possible experience with this, additional requirements may be made with regard to bandwidth, latency or locally available (software) components. The expectation is that graphic performance in the physical desktop will become available in the Virtual Machines over time. The Server Hosted Personal Remote Physical Desktops solution is supplied by HP, Citrix and Teradici, to name a few Client-side vdesktop Client-side, or Client-Hosted, desktop virtualization is a solution through which the Virtual Machine(s) is/are executed locally at the end point. The Hypervisor ensures that every virtual machine operates independently of hardware and renders it possible to utilize several Virtual Machines on the workstation at the same time. The hypervisor plays an essential role and can be subdivided into two categories, the bare-metal category and a client-hosted hypervisor. The bare-metal client hypervisor is often referred to as Type #1, as this can be used directly from the hardware resources. The result of this is a near-native performance. The client-hosted hypervisor is installed as an application on the Windows, Mac or Linux operating system, and provides a broader level of hardware support. As this hypervisor is installed on the operating system, this is referred to as Type #2. The performance of the vdesktop is acceptable for the average user, but is definitely not maximal. Citrix XenClient and VirtualComputer NxTop are bare-metal solutions. Microsoft VirtualPC-, XP mode for Windows 7- (build-in feature), MED-V, VMware ACE and Fusion, VMware View Client with Local Mode, Parallels Desktop, Sun VirtualBox are client-side desktop virtualization solutions. 4.4 VDI STRATEGY The growing reality of the transition to a dynamic datacenter is causing many IT organizations to reevaluate traditional IT operations, support, and management methods. Virtualizing the Desktop is a reasonable piece to support growing numbers of unmanaged desktops, external users, and other use-case scenarios. It s important to have a Vision and Strategy around Application and Desktop Delivery. Designing, building, managing and maintaining the vdesktop infrastructure using the right Technologies, corresponding vendors and products is an important last step. We see a lot organizations primarily focusing on products and vendors and lacking a clear and profound vision and strategy. This approach isn t good or bad, it depends on what the goal of the organization is. When the organization needs a point solution, the various vendors and corresponding products can help to solve this issue and fill-in the demands. Version 1.22 April 2011 Page 12/38

16 When the organization is investigating possibilities, advantages, use cases and functionality of the vnext Optimized desktop, a profound vision and strategy should be in place. The following themes should be part of the vdesktop strategy: What are the use-cases? And does the use-case require Virtualization? VD-why, what do I want to achieve?, lowering TCO?, business enabler, overall cost of ownership and cost reducer? What is the Business-case? What s the user experience using Multimedia, NextGen, Video/Voice, 2D/3D applications? What do users expect from the vdesktop? What endpoints do we support and facilitate and what is the role of these devices in the end-user experience? Secure Access- and Secure networking ( how do users, with a variety of endpoints (rich, thin, zero-clients and mobile devices) connect to the vdesktop?! What is the impact of Secure Access and Secure Networking solutions on mobile devices while connecting to the vdesktop? What is the user experience with these solutions? Do we need to manage the endpoints? How is the vdesktop managed? OS deployment, application distribution, patch management etc. etc. Is client management mandatory? Do we need image management? How are Windows applications delivered within the vdesktop? Unattended- or manual Installation, Application Virtualization or the applications are part of the (golden) image? What is the strategy? Is User Installed Applications inside the vdesktop needed? What is the performance and storage impact of Application Virtualization? What is the impact on storage ( and how does it effect the business-case? Do you need local- or centralized storage? Do we focus on stateless (pooled, shared) and/or stateful (assigned, private) images? What is, for example, the impact on storage, manageability, security, legal and business-case? What is the impact of client management solutions in a stateless VDI scenario? How do we design, build and maintain the (golden) Image(s)? Windows 7 or Windows XP as core vdesktop OS platform? x64 or x86? How does the solution scale? What do we need from a scalability point of view? How do we size the vdesktop and corresponding infrastructure and what are the bestpractices for optimizing the vdesktop? What is the performance and bandwidth impact on the network infrastructure; LAN, WAN, wlan How do we design, build and maintain the user s profile and his workspace? Licensing; Operating System, Client Access Licenses and (Business) Applications Do we need to backup (and restore) the vdesktops? Is Anti-Virus needed? Inside the VM or as service module on the Hypervisor? What is the performance impact of AntiVirus? Is the IT organization mature enough to support and maintain the complete technology stack? What is the knowledge and skill-set of the IT-department? Is separation of Operating System - Application - and User Prefferences inside- and outside the vdesktop part of the overall strategy? Bottom Line: What s your current Desktop strategy?! Version 1.22 April 2011 Page 13/38

17 5. VENDORS AND THEIR VDI SOLUTION 5.1 INTRODUCTION To get an overview of the major players in the Server hosted VDI space, a number of products are explained in this chapter (sorted alphabetically by vendor). 5.2 CITRIX XENDESKTOP INTRODUCTION Citrix has a long history in Server Based Computing with its XenApp product (formally known as MetaFrame Presentation Server). After the acquisition of XenSource, Citrix added two new product lines to its portfolio; Citrix XenServer for server virtualization and Citrix XenDesktop for desktop virtualization. Combined with the company's existing application virtualization product (as a part of XenApp), these two new additions give Citrix an end-to-end virtualization portfolio. ARCHITECTURE The architecture of XenDesktop consists of multiple components. This makes the initial setup of XenDesktop more complex than some other solutions. The tasks of the connection broker or the Delivery Controller are: Figure 3, XenDesktop architecture Authenticates users Manages assembling the user s desktop environment Brokers connections between the user and his virtual desktop Other components of the XenDesktop infrastructure are: Virtual Infrastructure (XenServer, Microsoft Hyper-V or VMware vsphere), Licensing server, Datastore, Provisioning server, Web Interface and Access Gateway for secure remote access. XenApp can also be included in the infrastructure for accessing remote or streamed applications. A XenDesktop agent is required in the guest VM or Blade PC. The agent enables direct connections between the endpoint and the user s virtual desktop. On the endpoint the Citrix Receiver is required. The Receiver provides simple access from any device, anywhere, to virtual desktops and applications. Version 1.22 April 2011 Page 14/38

18 The protocol used for XenDesktop (and XenApp) is the ICA protocol and has some special features. The ICA protocol performs better on limited bandwidth and higher latency than the RDP protocol. Citrix HDX Technologies were introduced in XenDesktop 4. HDX consists of several elements that should improve the user experience, such as VoIP and webcam support, 3D support, enhanced audio and optimization for use over WAN. LICENSING XenDesktop is available in 4 editions: 5.3 KAVIZA Express VDI Enterprise Platinum Each license type includes, next to the Desktop Delivery Controller (the broker) the right to use certain components of Citrix: XenApp, XenServer, Provisioning Server, Access Gateway, EdgeSight for desktops, etc. Express is the free version with the least components and allows up to 10 desktops and Platinum is the most advanced. An overview of the 4 different editions and their features can be found here (Not yet included in the version 1.1 of the Feature comparison matrix) INTRODUCTION Many customers have been priced out of traditional VDI solutions because of the complexity and the high upfront cost of deploying these solutions. Kaviza addresses this market with VDIin-a-box - an all-in-one virtual appliance that provides high-availability without requiring shared storage. Kaviza eliminates complexity by bundling all the VDI functions including load balancing, connection brokering, dynamic desktop provisioning, and high-availability into a single turnkey virtual appliance. Kaviza runs on off-the-shelf commodity hardware with direct attached storage - this eliminates the high infrastructure requirements of traditional VDI. Kaviza's grid scales on-demand and additional servers can be added as desktop needs grow. Kaviza has a strategic license with Citrix to resell HDX with its virtual desktops. Customers can buy Kaviza virtual desktops with HDX for $160 per concurrent user without needing any XenDesktop or XenApp licenses. Kaviza is hypervisor agnostic and currently supports both VMware ESX and Citrix XenServer. Support for Hyper-V is on the roadmap. Version 1.22 April 2011 Page 15/38

19 Figure 4, Kaviza solutions overview ARCHITECTURE As shown above, Kaviza uses a distributed grid architecture that consists of one or more servers each running a hypervisor and the Kaviza kmgr virtual appliance. The kmgr appliances on each server communicate and work together to: Run the desktops; Ensure there are redundant copies of key data so there s no single point of failure; Dynamically and automatically incorporate new servers; Detect and dynamically recover from server failures; Simplify management by allowing the administrator to manage the solution as if it were one logical server. 5.4 MICROSOFT VIRTUAL DESKTOP INFRASTRUCTURE INTRODUCTION With the technology originally called Terminal Services, a user is connected with a session on a Windows Server which allows for providing a full desktop session or individual programs(called RemoteApp) on the user s client device. A single Windows Server can host many sessions simultaneously, allowing multiple users sharing the same system resources. With the launch of Windows Server 2008 R2 in October 2009, the name Terminal Services was replaced by Remote Desktop Services (RDS). Windows Server 2008 R2 also introduced a new role, namely "Remote Desktop Virtualization Host". By adding this role to Microsoft s hardware virtualization platform, called Hyper-V, Remote Desktop Services now also allows for providing users with a dedicated virtual desktop running a Windows Client operating system. With SP1 for Windows Server 2008 R2, Microsoft added RemoteFX to Remote Desktop Services. The RemoteFX technology allows for a better user experience when using Remote Desktop Services. RemoteFX allows USB redirection, high-definition video and using 3D applications over Microsoft s Remote Desktop Protocol. RemoteFX works for virtual desktops as well as session based desktops. Version 1.22 April 2011 Page 16/38

20 ARCHITECTURE Microsoft utilizes its own Remote Desktop Protocol(RDP) to provide the remote desktop or remote application to the user. For the best experience and functionality a client device should run Windows 7 with RDP7. The Microsoft Virtual Desktop Infrastructure consists of the following Windows Server 2008 R2 roles: Remote Desktop Gateway(RDG) This is an optional role to provide secure access to the Microsoft Virtual Desktop Infrastructure from internet-based clients. Remote Desktop Web Access(RDWA) This role provides access to the desktops and/or remote applications available for a specific user. After the user browses to the Web Access URL and authenticates, Web Access provides a webpage displaying the shortcuts to the resources available to this user. If the client device is running Windows 7 and is on the corporate LAN the shortcuts can be also integrated in the user s Start Menu. Remote Desktop Connection Broker (RDCB) The Connection Broker tells Web Access which resources are available to the user. The RDCB role is the broker which connects the client to the correct resource selected by the user in Web Access. Remote Desktop Session Host(RDSH) Formerly known as a Terminal Server, RDSH provides server hosted desktops or remote applications to the client. When in Redirect Mode the Session Host redirects the client session to a virtual desktop hosted on a Remote Desktop Virtualiation Host. Remote Desktop Virtualization Host(RDVH) A Virtualization Host is a Microsoft Hyper-V host with the Virtualization Host agent service installed. The Virtualization Host agent service manages the starting of the virtual machines when a user wants to connect. The RDVH uses a Session Host in Redirect Mode to connect a virtual desktop to a client. Figure 5, Microsoft VDI architecture Version 1.22 April 2011 Page 17/38

21 LICENSING Microsoft also offers VDI suites. The standard VDI Suite includes the basic infrastructure and management components required for a VDI deployment, and the VDI Premium Suite includes additional desktop and application deployment options. Both Volume Licenses are available as device based subscriptions on top of Software Assurance, thereby complementing the VDA license. The Microsoft VDI Standard Suite includes licenses to the following technologies: Hypervisor platform (Hyper-V Server 2008 R2) An integrated management suite for VDI (System Center Virtual Machine Manager 2008 R2, System Center Operations Manager 2007 R2, and System Center Configuration Manager 2007 R2) Microsoft Application Virtualization through the Microsoft Desktop Optimization Pack (MDOP) Connection brokering capability through Windows Server 2008 R2 Remote Desktop Services. The Microsoft VDI Premium Suite includes all the features of the Microsoft VDI Standard Suite, and adds: Complete Remote Desktop Services capability, including the option to deploy session based desktops in addition to VDI desktops. Microsoft Application Virtualization for Remote Desktop Services VDI Feature VDI Premium standard RDS SCVMM SCOM SCCM MDOP (included App- V / MED-V App-V for RDS RDS brokering for published apps (RemoteApp 5.5 QUEST VWORKSPACE INTRODUCTION Quest vworkspace is the result of an acquisition in 2007 by Quest of a company called Provision Networks. Founded in 2004, Provision Networks aimed to reduce the adoption barriers of virtual desktop deployment and application delivery, through cutting-edge technologies that address the end-to-end requirements of global deployments. Quest vworkspace delivers virtual applications and desktops from multiple hypervisors, Remote Desktop Services and blade PCs through a single user access point and management center. A key component of the vworkspace offering is Quest EOP (Experience Optimized Protocol), a set of technologies that embrace and extend the Microsoft RDP protocol to provide a near local user experience over both LAN and WAN. Version 1.22 April 2011 Page 18/38

22 ARCHITECTURE The connection broker is called the vworkspace Connection Broker. Other components are a vworkspace configuration database, vworkspace web interface and vworkspace SSL gateway server. The protocol that is used to connect to the desktop is the regular RDP protocol. For a better (graphics) performance over WAN the EOP protocol (Experience Optimized Protocol) can be used. Figure 6; Quest vworkspace solutions overview LICENSING Quest vworkspace is available in 2 types of licenses: The Desktop Services Edition and Enterprise Edition. Both are available as concurrent and device based licenses. Version 1.22 April 2011 Page 19/38

23 5.6 ORACLE VIRTUAL DESKTOP INFRASTRUCTURE (Not yet included in the version 1.1 of the Feature comparison matrix) INTRODUCTION Oracle (previous SUN) offers a VDI solution that is made up of four main components: virtualization platform, session management (VDI Core), desktop access clients and storage. The central component is the SUN VDI core (broker). This component is responsible for the session management. IT architects can mix and match the different components to fit the needs of the customer. For example, when a customer wants to use Sun Ray thin clients but not the Sun VDI core as a broker, the customer can user VMware View as a broker with the Sun Ray software to use the Appliance Link Protocol (ALP), which is used by Sun Ray ultra-thin clients. ARCHITECTURE The architecture of Oracle VDI is described below. Figure 7, SUN's VDI stack The basis for a VDI architecture is the virtualization platform. In addition to creating and storing virtual machines, the virtualization platform offers the core functionality needed for virtual desktop management such as starting, stopping, and snapshotting virtual machines. Sun VDI 3.1 supports the Sun VirtualBox, VMware vcenter, Microsoft Hyper-V, and Microsoft Remote Desktop Services virtualization platforms. SESSION MANAGEMENT The central component of the Sun VDI is the Sun VDI Core. The VDI Core provides all the functionality needed to build and manage large scale virtual machine deployments. In addition to its management capabilities, the VDI Core is also responsible for the brokering of virtual desktops on behalf of desktop access clients. Version 1.22 April 2011 Page 20/38

24 DESKTOP ACCESS Three distinct mechanisms are supported for access to virtual desktops. Sun Ray DTU or Sun Desktop Access Client - Users can access their virtual desktops through a Sun Ray Desktop Unit (DTU) or through Sun Desktop Access Client software by authenticating themselves with a user name and password, or a token card can be inserted in a Sun Ray DTU instead of providing a user name. Successful authentication initiates a custom Sun Ray Software Kiosk Session. The custom Kiosk Session uses the Sun VDI Core to request access to a virtual desktop on behalf of the user. Once a virtual desktop has been assigned to the user, a Remote Desktop Protocol (RDP) connection to the desktop is established for the session using the Sun Ray Windows Connector. Secure Web Access with SGD - In this case, the browser is used to initiate a Sun Secure Global Desktop Software (SGD) session. SGD, in turn, uses the VDI Core's RDP redirection capability to establish a connection to an assigned virtual desktop. RDP Client Access - (RDP redirection must be supported on the client side to use this mechanism). As with the previous case, the VDI Core's redirection capability is used to establish a connection to an assigned virtual desktop. 5.7 VIRTUAL BRIDGES, VERDE Founded in 2006, Virtual Bridges is based in Texas, USA. In 2009 Virtual Bridges launched VERDE, an end-to-end desktop management solution that combines online and offline VDI and remote branch solutions. VERDE = Virtual Enterprise Remote Desktop Environment and is an end-to-end virtual desktop infrastructure and management solution that combines VDI, offline VDI and VDI remote branch solutions to remove the management burden, complexity and cost traditionally associated with desktop virtualization solutions. VERDE offers unified management and reporting through a single console and is adaptable for today s dynamic environment. Ideal for companies of all sizes, VERDE can scale up to ten thousand clustered servers or scale down to a single-server configuration. The VERDE suite includes: VERDE Core, VERDE Console, VERDE VDI, VERDE LEAF, VERDE Cloud Branch; VERDE Core includes: Servers and Clusters Gold Master Images AD/Directory Services Shared Storage VERDE VDI includes Desktops hosted and managed in datacenter Clients: PCs, Mac, Thin Clients & PDAs, Windows and Linux VERDE Display protocol, RDP, NX, SPICE VERDE Console is a web-based monitoring console which offers real-time visibility to all virtual desktop sessions running on VERDE cluster servers. Administrators have flexibility to view virtual desktop sessions grouped by user or server or based on type of Gold Image. In addition, the console provides real-time server utilization metrics VERDE Leaf, Live Environment Access Format, provides both connected (access to remote virtual desktop sessions) and offline (virtual desktop session is locally cached and executed on the client machine) access. LEAF is a self-contained local desktop virtualization platform that is fully secure, so there is no need to worry about external endpoint security solutions. LEAF also includes integrated VOIP (Skype) applications. Version 1.22 April 2011 Page 21/38