Intel,Altiris Group

Getting to a Dynamic Virtual Client Platform 

Dec 16, 2009 04:00 PM

Sometimes new ideas are a rework, improvement, or different application to an existing idea.   The intent of this post is to both educate on emerging alternative client compute models, but also to request inputs from the Symantec Connect Community how existing tools can be applied to enhance or migrate to these compute models.   Thus the application of joint experiences and understanding.

Alternative compute models are emerging for a client computing environment, and are what Intel calls “Dynamic Virtual Clients”.     In some respects, the alternative models already exist.   The difference is the direct hardware, software, and related ecosystem support to further enhance these model.

The following picture provides an overview which information available via a whitepaper on alternative compute models (see http://communities.intel.com/docs/DOC-2550) or via a recorded webinar (see http://communities.intel.com/community/openportit/vproexpert/emergingcomputing/blog/2009/11/18/watch-it-on-demand-intro-to-dvc-recording-now-available)

alt-computer-models.gif

In discussing the alternative compute models with a variety of individuals, the question is often raised: How does Symantec enable or enhance these models?

The verbal answer points to a variety of Symantec products including Client Management Suite, Workplace Streaming (i.e. Appstream), SEP (Symantec Endpoint Protection), BESR (Backup Exec System Recovery), Workflow, and more.
In briefly discussing each of the Symantec products, a deeper understanding is obtained how that individual product might help achieve the overall vision.   Product managers, consultants, and others all agree in principle how Symantec products might come together for the realization of a DVC solution.   However, a conclusive end-to-end story still seems ethereal… and thus the intent of this article to educate and solicit inputs on the full realization of an alternative compute model.   The clarify – how Symantec products help to achieve that realization in connection with tools outside Intel and Symantec.

Background on the Models and Players

There are a variety of reasons and in-roads to why these alternative compute models are of interest.   Often the intent is to remove a user’s direct dependency on a particular client computing device.   Related intents might be to minimize application compatibility constraints, improve management, and so forth.

Those who take the “thin client” approach are looking for central management of data and application.   This model allows any user to login to any terminal system, yet still have their profile of applications, data, and so forth.   Security is also a factor in why a thin client approach is used.  Generally speaking, the actual client device is a small and must have connectivity to a backend infrastructure which must be expanded to handle all the sessions.    Thin clients are a common model for call center, retail, healthcare, or related environments.

A “rich client” approach suggests local data storage, local application usage for rich media, and so forth.   This model allows mobile, off-line usage.   Management and security at the endpoint device is important.   This is the model to which many laptop users, mobile workforce, analysts, engineering, or related types of users may be accustomed.

The image below depicts a third model – Dynamic Virtual Client.   The intent is to merge the benefits of a thin client and managed rich client environment.   The previous image highlighted a few examples such as operating system streaming, application or environment virtualization, or client side virtualization.

DVC-overview.gif

The alternative compute or DVC models have reinforced a concept which has existed for years yet is fairly new for the client environment.   The concept is virtualization, with a distinction between Type 1 and Type 2 hypervisors.  

In summary – the difference between a virtualization layer directly below or on top of the client operating system.   More explanation on hypervisors is available at http://en.wikipedia.org/wiki/Hypervisor.

Those providing the hypervisors for the DVC model include:
 


All of the hypervisors utilize hardware virtualization such as Intel VT.

In addition to those offering hypervisor solutions for full operating environment, Symantec provides application virtualization for Windows clients.   Symantec Workplace streaming, formerly called Appstream, has been used in production environments for several years.   This solution is being enhanced with greater Intel vPro technology platform capabilities (see solution brief at http://www.symantecintelalliance.com/public/pdf/INT_Sym_EndpointVirtualization_SB.pdf).

There are other pieces, components, and players to the Dynamic Virtual Client paradigm.   Pilot deployments are occurring today, and more deployments will be occurring in the coming year.

Yet in the all of the hoopla around DVC, how does migration to the environment occur or what further enhancement are obtainable using currently available Symantec products?

How Symantec Can Help Achieve the DVC vision

At the beginning of this article, the question was raised on how do the various Symantec products help to achieve DVC.   In providing the background, a few ideas may have surfaced around direct or indirect involvement.
The following diagram provides an overview with a few brief explanations on what Symantec products might help achieve this vision.   Some items have been tested in the lab, or verbally confirmed by product experts.   Other ideas are theoretical based on discussions.

I am open to the thoughts and inputs of the community.  Again – the intent is for mutual understanding and collaboration as the alternative compute models are deployed.   The desired outcome is for confirmation on the combination of tools, examples where combined tools (or alternative tools) are being used today, and even feedback on to make the process\solution even better.

getting-to-DVC.gif

Based on the above model, a few Symantec solution platforms and tools that come to mind to brief the “Managed Client” to the “Dynamic Virtual Client”.

  • Symantec Manageability Platform (i.e. Altiris) – With Out-of-Band management and Intel vPro technology, the ability to remote power, boot redirect, and perform other functions at the hardware layer to assist with the migration.   Deployment solution can be used to apply the hypervisor environment and other needed partitions\files to the target systems
  • Symantec BESR – Enable physical-to-virtual conversion.   Output can be VHD (Microsoft Hyper-V) or VMDK (VMware) based.   For a Microsoft Windows 7 deployment, the BESR product combined with Deployment solution can capture the current environment in case of application compatibility or other needed.
  • Symantec Workplace Virtualization\Streaming – Application virtualization, license management, and other capabilities within the deployed DVC environment.
  • Symantec Workflow – The orchestration of events across the different product lines to help with the migration to DVC.

There are likely other Symantec products that could help or enhance this environment.   In your own experience or understanding, if there’s an idea to be shared… please do share.

Concluding Thoughts

Alternative client compute models are already emerging with the advent of Hyper-V inside Windows 7 deployments, Citrix XenClient, VMware CVP, and so forth.   The links shared above or an Internet search will point to the production examples that are occurring.   The alternative models help to address a gap between thin client and a rich managed client, providing an improved  operating environment to the user.   Understanding how Symantec products currently assist – or could potential assist – in achieving a DVC solution is a mutual interest beyond just Intel and Symantec.   Thus the final request - if you agree/disagree, have further insights, or simply want more information - please indicate

The opinions expressed on this site are mine alone and do not necessarily reflect the opinions or strategies of Intel Corporation or its worldwide subsidiaries

 

 

Statistics
0 Favorited
0 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Dec 18, 2009 07:10 PM

In the article Getting to a Dynamic Virtual Client Platform, Terry Cutler poses the question:  How does Symantec enable or enhance these models?

To be clear, Symantec has so many products in so many areas, that we enable or enhance just about anything that has been or will ever be conceived.  Terry lists several of them.  But I want to focus on the Endpoint Virtualization angle because it speaks directly to why DVC has come about in the first place.  And that reason is that Enterprises are increasingly relying on various computing models to solve problems and satisfy needs.  Thin clients are only part of the solution, and they are also only part of the problem.

Long gone are the days when all users are satisfied and productive on a PC connected to the LAN.  End users have become more mobile and demand greater flexibility in where they work and on what devices.  IT managers are desperately trying to maintain a controlled and secure environment, but they don't get to dictate endpoints the way they used to.  Contrary to the claims of some software vendors, there is no panacea computing model that provides well for everybody.  IT managers have gotten wise to that and the result is that they are smartly choosing the compute model that makes the most sense for each user group and role in their company.  This means finding the right balance of cost-per-user, application performance, interactivity, connectivity, security, etc. for each group.

So, yes, we are seeing companies pushing toward thin clients, but only for a subset of users.  In some cases, users that really do need rich clients and local execution are getting their systems reinstated after failing to meet their needs with thin clients.  We are finally starting to recognize and achieve a balance of models, and the DVC approach is helping to satisfy IT and user needs for many use cases.  The big problem, once we have made all of these choices, DVC included, is one of management and containment of costs.  While satisfying the needs of each individual group, we often find that we've compromised the results of the whole organization by raising the total cost of supporting these multiple infrastructures.

Let's assume that an organization of any significant size will have some combination of laptops, desktops, terminal servers, VDI (hosted desktops), and/or blades.  Each model either comes with or is managed by a different set of tools.  At the infrastructure level, that may make sense, as the hardware and base image requirements have unique needs.  But what of the Workspace - that productivity environment that every user needs to get their job done - the applications, their personalizations and customizations, and their data?  We could continue to package, deliver, manage, update and remove applications in distinct and separate ways in each environment, but why?

Why should they care if their workspace is running on the local hardware or in the data center somewhere, as long as they can get they have maximum productivity?  They don't.  Remember, we have already made the best decisions for infrastructure for each group, but users continue to access resources from multiple models, and often move between them in the course of their work.  What a user needs is consistency that is independent of the device or infrastructure.  Whey they need is portable workspaces.  I will not go into exactly how all of that is achieved here, but suffice it to say that it involves application streaming, app virtualization, and profile virtualization to achieve the "just-in-time" workspace that follows the user as they move from system to system, or reassembles itself on new systems or in stateless environments.  Our Endpoint Virtualization Suite has the products to do this.  The diagram below shows how this approach unifies the workspace and where Endpoint Virtualization resides with respect to our software partners and other infrastructure components.
Dynamic Workspace.JPG

In short, a tremendous amount of IT time and money can be saved by recognizing that workspaces can be and should be common across all infrastructures.  Each computing model should be managed and built up only to the operating system, taking a minimum common configuration approach, allowing the specific applications, profile, and data to be streamed and assembled instantly as needed.  Compared to the traditional approach, which is to assemble the maximum configuration, because we don't know what applications or resources will be needed, you can see how management becomes simpler and unnecessary redundancy goes away.

We are all doing our part, Intel with DVC, Symantec with Endpoint Virtualization (and many other solutions), as examples to better satisfy the primary objective of IT, which is to support the productivity needs of end users.  IT can continue to make good choices about the mix of infrastructure components that makes the most sense for them.  Intel and Symantec will do our best to provide the best hardware and software options to contain costs, automate tasks, and make all of the inevitable complexity as transparent as possible to the end user.

 - Brian Duckering, Sr. Manager, Endpoint Virtualization

Related Entries and Links

No Related Resource entered.