VMware Cloud Director 10.6 is now GA
As we delve into the brand new Broadcom Benefit Associate Program with a number of cloud providers choices, VMware by Broadcom is thrilled to announce that VMware Cloud Director 10.6 is now out there as a part of the VCF (VMware Cloud Basis) providing, beginning June twenty seventh, 2024. This main launch brings new options and enhancements that may revolutionize your managed personal and public cloud choices.
Our relentless concentrate on multi-tier tenancy has led to the introduction of modern capabilities and enhancements to current ones, offering you with unparalleled flexibility, scalability, and management. Whether or not you’re seeking to streamline your cloud operations or develop your attain, VMware Cloud Director 10.6 has obtained you lined.
On this newest replace, you’ll discover important enhancements and new options within the following areas:
Three-Tier Tenancy
VMware Cloud Director permits cloud suppliers to determine a multi-layered organizational construction via the UI, generally known as the three-tier tenancy mannequin, to create sub-provider organizations with restricted administrative privileges over a selected set of tenants.
With this functionality, cloud suppliers can grant restricted entry to particular assets and providers inside their infrastructure, making certain that every tenant has managed entry to solely the assets they want. This enhanced tenancy mannequin additionally permits higher scalability, flexibility, and safety, as cloud suppliers can simply handle and provision assets throughout a number of ranges of administration.
This modern strategy permits cloud suppliers to undertake varied enterprise fashions, reminiscent of:
- Create sub-provider organizations which facilitate nested multi-tenancy inside massive enterprise organizations, permitting them to create separate administrative hierarchies for various departments or subsidiaries.
- Resell cloud providers via companions or managed service suppliers.
This launch brings the three-tier tenancy functionality to all facets of assets and providers out there via VMware Cloud Director, making it a super resolution for cloud suppliers seeking to supply versatile and scalable cloud providers to their clients.
Scale Limits
This launch brings important most scale improve in a number of areas of the platform reminiscent of:
- The utmost variety of VMs per VMware Cloud Director occasion has been elevated to 55,000, no matter energy state.
- The variety of concurrent distant consoles supported has been elevated to 22,000.
- The utmost variety of customers supported by the platform has been elevated to 300,000.
- The organizational mannequin for grouping Digital Knowledge Heart Collections (Org VDCs) has been revamped to undertake a three-tier construction. Beneath this new design, the Sub-Supplier can now handle Knowledge Heart Teams, which might accommodate as much as 2000 members (beforehand 16) and share networks and uplinks amongst them.
A number of VM and vApp Snapshots
VMware Cloud Director now provides enhanced flexibility on your digital machines and vApps with the power to take a number of snapshots per VM or per vApp, as much as a most quantity set by your cloud supplier.
By supporting a number of snapshots, VMware Cloud Director gives a extra environment friendly and versatile method to handle your digital machines, supplying you with higher management and confidence in your cloud infrastructure.
Content material Hub
Now, effortlessly handle and orchestrate your containerized functions and assets throughout the cluster with the enhancements made to the Content material Hub.
- Kubernetes cluster directors can now outline exact entry controls, granting particular person customers or teams tailor-made permissions to entry particular clusters, namespaces, or functions. This characteristic permits a multi-tenant structure, permitting a number of organizations to securely coexist inside the similar Kubernetes atmosphere, every with their very own remoted namespace to deploy, handle, and govern their containerized workloads.
- A brand new model of the Content material Hub Operator has been launched, which runs natively inside the Kubernetes cluster and makes use of WebSocket Protocol, for high-performance communication with VMware Cloud Director. The operator additionally gives real-time compatibility reporting to the Tenant Portal, enabling cluster house owners to make knowledgeable choices about when to improve to make sure seamless integration with VMware Cloud Director.
Distributed World Catalog
Enable for a worldwide, multi-site cloud structure by enabling seamless entry to catalogs throughout a number of VMware Cloud Director (VCD) websites, offering a unified catalog expertise for tenants whatever the vCenter occasion or SDDC infrastructure. Leverage vendor-agnostic shared storage options (reminiscent of NetApp, Dell, vSAN, and so forth.) to copy information and guarantee international consistency throughout the catalog.
A number of IDP Protocols and Native customers
VMware Cloud Director permits organizations to make the most of a number of identification supplier protocols (IDP), together with LDAP, SAML, and OpenId Join (OIDC), for a extra complete authentication strategy. By leveraging exterior identification suppliers, you may profit from the most recent developments in authentication know-how. It’s price noting that whereas native customers are nonetheless supported for analysis functions within the present launch, their use in manufacturing is being deprecated, and can proceed to be absolutely supported till the subsequent main launch of VMware Cloud Director.
Improved VM Template instantiation efficiency
When provisioning a VM template on a unique vCenter utilizing VMware Cloud Director, the system takes a two-pronged strategy to make sure environment friendly deployment. Initially, it makes an attempt to speed up the method by cloning the VM template instantly, leveraging the pace and effectivity of this methodology. This strategy permits the system to quickly create a brand new VM occasion with out the overhead of exporting and importing the VM as an OVF file. Nevertheless, if the cloning operation encounters any points or errors, the system will routinely change to a extra conventional methodology, using OVF export/import to deploy the VM. This fallback strategy ensures that the provisioning course of is accomplished efficiently, even in instances the place cloning might not be attainable.
Enhanced Encryption Administration
VMware Cloud Director 10.6 introduces a number of enhancements to the encryption administration characteristic:
- A number of Key Suppliers could be registered concurrently, offering higher flexibility and scalability.
- The cluster title could be edited throughout key supplier publishing, permitting service suppliers to simply establish which key supplier belongs to which tenant.
- When authenticating a Key Supplier or registering a brand new key, customers can now go for producing a brand new key for every encryption operation, making certain added safety.
- A brand new key rotation characteristic has been launched, enabling computerized key rotation primarily based on configuration settings. This course of is non-disruptive and ensures seamless encryption.
- VMware Cloud Director 10.6 introduces a brand new characteristic that enables customers to use completely different encryption insurance policies to completely different storage insurance policies, offering higher flexibility and customization of their encryption methods.
- When deleting an encryption coverage, VMware Cloud Director 10.6 now gives the choice to ‘Don’t re-encrypt’ beforehand encrypted information.
vSAN 4.1 NFS Assist
VMware Cloud Director 10.6 now consists of help for vSAN 4.1 NFS, enabling safe file sharing with Kerberos authentication. This integration permits for the usage of vSAN 4.1 as a dependable and safe storage resolution, offering an extra possibility for file sharing inside your group.
Resolving CVE-2024-22272 Vulnerability
For extra info on this vulnerability and its affect on VMware by Broadcom merchandise, see VMSA-2024-0014.
IPv6 Assist for VMware Cloud Director equipment nodes
VMware Cloud Director helps the deployment of equipment cells in IPv6 networks, enabling clients to leverage the advantages of this contemporary networking protocol whereas sustaining compatibility with current infrastructure.
Customized Well being Monitor
As a part of our ongoing efforts to boost the consumer expertise, we’re introducing Customized Well being Screens as a complement to our current HTTP insurance policies. With this characteristic, tenants can now monitor and troubleshoot varied well being traits of their load-balanced providers, together with metrics reminiscent of response time, packet loss, and connection errors. This enables them to take proactive measures to keep up service reliability and responsiveness.
Avi Load Balancer Logging
With the brand new tenant-level Avi LB logging functionality, tenants and cloud suppliers can now achieve a deeper understanding of their Avi LB utilization. This characteristic gives granular visibility into Avi LB exercise, enabling them to trace utilization patterns, triage occasions, and export logs for auditing, compliance, and regulatory functions.
Avi LB WAF
The Avi LB and Cloud Director integration opens up new alternatives for our clients to ship value-added providers to their finish clients. By integrating WAF safety features into their service portfolio, they’ll present enhanced safety towards web-based assaults, enhance buyer satisfaction, and strengthen their market place.
With the introduction of WAF, listed here are a few of the benefits:
- Improved safety: WAF helps shield towards web-based assaults, reminiscent of SQL injection and cross-site scripting (XSS), by filtering incoming site visitors and blocking malicious requests.
- Enhanced compliance: WAF might help organizations meet regulatory necessities by offering visibility into internet site visitors and permitting them to dam particular kinds of site visitors or requests.
- Elevated buyer belief: By providing WAF as a value-added service, organizations can reveal their dedication to safety and construct belief with their clients.
- Aggressive differentiation: WAF is usually a key differentiator for organizations seeking to stand out in a crowded market, because it gives an extra layer of safety and safety.
IP Handle Administration
Vital upgrades have been made to IP Handle Administration, with a concentrate on simplifying IP reservations for workloads and allocating IP addresses to long-lived providers, reminiscent of load balancer digital IPs. These enhancements are designed to align with a three-tier permission construction, offering a user-friendly expertise for managing IP deal with lifecycles, that are derived from IP swimming pools for tenants, sub-providers, and supplier personas.
IPsec VPN on Supplier Gateways and Edge Gateways
VMware Cloud Director has prolonged its IPsec VPN capabilities to incorporate tunnel institution on devoted supplier gateways. The up to date VPN administration framework is now structured right into a three-tier mannequin, permitting tenants, sub-providers, and suppliers to arrange and handle VPNs. With this enhanced functionality, suppliers can use Border Gateway Protocol (BGP) to regulate which IP prefixes make the most of the VPN. Moreover, suppliers and sub-providers can automate BGP configuration for his or her tenants when utilizing IP Areas to handle community assignments for private and non-private addressing. Furthermore, suppliers and sub-providers can delegate particular BGP configurations to their tenants, offering higher flexibility and management.
New UX for deploying Avi Controllers and NSX Cloud Connectors
VMware Cloud Director 10.6 introduces important enhancements to the provisioning of Avi Controllers and NSX Cloud Connectors, thereby boosting Avi LB scalability. The brand new consumer expertise (UX) permits directors to simply add extra Cloud Controllers to current Avi Controllers, permitting for elevated capability and efficiency. Moreover, the UX gives invaluable insights into consumption metrics for Avi controllers, NSX cloud, and edge gateways, empowering directors to make knowledgeable choices about useful resource allocation and optimization.
Safety Log Ingestion
VMware Cloud Director has enabled log ingestion, seamlessly connecting to VMware Aria Operations for Logs. NSX Gateway Firewall and Distributed Firewall logs are actually routinely processed by VMware Aria Operations for Logs, offering quick access to those logs via the tenant portal. This integration empowers tenants to rapidly discover particular occasions utilizing filters and time ranges, and export logs to CSV recordsdata for additional evaluation and reporting.
Name To Motion:
- Get began with VMware Cloud Director 10.6 by downloading the most recent model from here.
- For detailed info on find out how to use and configure VCD 10.6, please confer with the official documentation here.
- For extra assets and details about VCD, go to the devoted VMware Cloud Director web page on vmware.com here.
- To view the API information learn the legacy API information here and the OpenAPI information here.
Object Storage Extension 3.1
VMware Cloud Director Object Storage Extension model 3.1 introduces new options, together with:
- MinIO help for exterior Kubernetes clusters.
- Consumer IP forwarding for custom-made bucket entry management.
- Enhanced Kubernetes Backup and Restore UI for higher visibility and administration.
- OSIS (Object Storage Interoperability Service) updates for S3-compliant storage distributors and asynchronous tenant onboarding.
Name To Motion: Obtain OSE 3.1 from here and browse the OSE 3.1 documentation here.
To share this weblog together with your friends and colleagues, please use this hyperlink: https://bit.ly/45mY62F
