Security Implications of the Virtualized DataCenter
by F5 Networks

> View this White Paper now

Published on: 09/01/2008
Type of content: White Paper
Format: Adobe Acrobat (.pdf)
Length: 7
Price: FREE

Overview
The concepts behind application & operation system virtualization are not new concepts, they have been around long before server appliances & desktop PCs were readily available in our daily vocabulary. The recent rate of virtualization adoption however, especially that of software operating system virtualization, has grown exponentially in the past few years. According to Joe Tucci, the CEO at EMC®, most VMware® customers are planning on virtualizing 50% of their IT infrastructure within the next three years2. Virtual machines have finally come into their own, & are quickly moving into the enterprise data center & becoming a universal tool for all people & groups within IT departments everywhere.

There are two primary types of platform virtualization: transparent & host-aware (often referred to as paravirtualization). Transparent virtualization is implemented so that the guest is not aware that it's running in a virtualized state. The guest consumes resources as if it were natively running on the hardware platform, oblivious to the fact that it's being managed by an additional component, called the VMM (Virtual Machine Monitor), or hypervisor. The more standard forms of virtualization today, such as those by VMware, implement transparent hypervisor systems. These systems can be thought of as proxies: the hypervisor will transparently proxy all communication between the guest & the host hardware, hiding its existence from the guest so the guest believes it's the only system running on that hardware.

Host-aware implementations differ in that the guest has some form of virtualized knowledge built into the kernel; these can be considered "virtual self-aware" environments. There is some portion of the guest operating system kernel that knows about the existence of the hypervisor & communicates with it directly. Rather than transparent proxying of all communication, the guest OS will call the hypervisor directly, which will in turn manage the communication to the hardware. Xen (pronounced ‘zen'), a popular virtualization implementation for Linux, uses a hostaware architecture, requiring special hypervisor command code actively running in both the host & all running virtualized guests. Each form of virtualization comes with pros & cons, but both work equally as well. Transparent systems are the most portable for the guest, but sacrifice speed & are typically designed around much heavier hypervisors; host-aware systems are faster & more lightweight, but require guest modifications & can introduce security issues that transparent systems may not suffer from.

One of the driving factors in virtualization adoption is the open nature of hardware support for VMMs: Hardware platforms, which run & manage the primary host operating system, & the VMM are not specialized devices or appliances. Virtual host platforms can be any type of hardware that used today: single CPU desktop machines; laptops; x86 servers; SPARC servers; rack mounted appliances; etc. A normal user running Microsoft® Windows® XP Professional on their laptop can run multiple virtual instances of other operating systems--such as Linux, BSD, or Windows Vista -- using any number of freely available VMM software implementations. This flexibility, the move of virtualization software to everyday hardware, has allowed everyone direct & inexpensive access to run virtualized environments. While at first this access was relegated to technology professionals, such as Unix users who were required to run Windows as their base OS, it has quickly become the topic of IT managers. Platform virtualization provides an inexpensive mechanism to substantially expand server farms & data centers. Virtualization allows a company to purchase one high-end hardware device to run 20 virtual operating systems instead of purchasing 20 commoditized lower-end devices, one for each single operating platform.

> View this White Paper now

Solution Center
IBM's first dispatcher went into their operating system when they enabled multiprogramming in the 1970s. In the 90s, IBM introduced the Processor Resource/Systems Manager (PR/SM) Hypervisor, which enabled users to run one or more instances of... More...
Nov 25, 2008
Three summers ago, a 76-inch main line that feeds water from Lake Lavon to 29 cities and towns in Texas broke. That was a disaster for credit services giant Experian, which relied on city water to supply the chillers that cool its McKinney data... More...
Nov 24, 2008
Other content by this company
Virtualization Defined - Eight Different Ways by F5 Networks
Virtualization is not a new concept. Today it appears that virtualization is everywhere, which because of its ambiguity can be applied to any and all parts of an IT infrastructure. This whitepaper focuses on virtualization in the data center. What does "going...
Effective Disaster Recovery Planning by F5 Networks
This paper addresses the increased performance needs of a disaster recovery plan, and the common barriers to achieving success. It also addresses the performance gains that can be achieved by using an F5 WANJet application acceleration solution. Disaster...
Related Content By Vendor
For data center managers who have just embarked on virtualizing a data center or for those already engaged in the process, our bimonthly Virtual Data Center e-zine explores the challenges --and the benefits -- involved. We've delved into... More...
Oct 21, 2008

If you're looking for resources on low-cost networking, iSCSI, SATA and IP storage, you've come to the right place. SearchStorage.com's editors have put together a stockpile of the latest news, expert advice and tips to help you stay on top of what's... More...

Aug 17, 2005