1 1 00:00:00,770 --> 00:00:02,140 Virtual network devices 2 2 00:00:02,140 --> 00:00:04,150 represent a major shift in the way 3 3 00:00:04,150 --> 00:00:05,980 data centers are being designed, 4 4 00:00:05,980 --> 00:00:07,710 fielded, and operated. 5 5 00:00:07,710 --> 00:00:10,680 We have started virtualizing everything out there. 6 6 00:00:10,680 --> 00:00:12,240 We started with virtual servers 7 7 00:00:12,240 --> 00:00:14,150 and now, we're in the virtual routers 8 8 00:00:14,150 --> 00:00:15,830 and switches and firewalls. 9 9 00:00:15,830 --> 00:00:17,620 We even have virtual desktops 10 10 00:00:17,620 --> 00:00:18,500 where you don't have to have 11 11 00:00:18,500 --> 00:00:20,070 a physical computer anymore 12 12 00:00:20,070 --> 00:00:22,050 and instead, you operate everything 13 13 00:00:22,050 --> 00:00:23,440 through a web browser. 14 14 00:00:23,440 --> 00:00:24,600 We also have VoIP, 15 15 00:00:24,600 --> 00:00:27,000 which is virtualizing voice and telephones. 16 16 00:00:27,000 --> 00:00:28,670 And we have software-defined networking 17 17 00:00:28,670 --> 00:00:30,140 and cloud computing. 18 18 00:00:30,140 --> 00:00:32,080 Now, we're going to talk about all of these things 19 19 00:00:32,080 --> 00:00:33,970 in this section of the course. 20 20 00:00:33,970 --> 00:00:36,280 Let's talk about virtualization first. 21 21 00:00:36,280 --> 00:00:37,790 Virtual servers have the ability 22 22 00:00:37,790 --> 00:00:40,030 to allow multiple virtual instances 23 23 00:00:40,030 --> 00:00:42,710 to exist within a single physical server. 24 24 00:00:42,710 --> 00:00:44,780 Now, if I have one hardware server, 25 25 00:00:44,780 --> 00:00:46,280 as shown here on my screen, 26 26 00:00:46,280 --> 00:00:48,100 I can end up having six or seven 27 27 00:00:48,100 --> 00:00:49,620 or eight virtual servers 28 28 00:00:49,620 --> 00:00:51,430 residing inside of it. 29 29 00:00:51,430 --> 00:00:53,660 In this example, I have a file server, 30 30 00:00:53,660 --> 00:00:55,840 a network server, a mail server, 31 31 00:00:55,840 --> 00:00:58,080 a database server, a web server. 32 32 00:00:58,080 --> 00:00:59,960 You're going to start to get the idea here. 33 33 00:00:59,960 --> 00:01:01,100 Now, all of those servers 34 34 00:01:01,100 --> 00:01:02,750 can be running the same or different 35 35 00:01:02,750 --> 00:01:04,230 operating systems, as well. 36 36 00:01:04,230 --> 00:01:07,080 They might be running Windows or Mac or Linux, 37 37 00:01:07,080 --> 00:01:08,840 all of those simultaneously 38 38 00:01:08,840 --> 00:01:10,960 on this one piece of hardware. 39 39 00:01:10,960 --> 00:01:12,700 This allows us to have a lot 40 40 00:01:12,700 --> 00:01:14,930 of our cost savings for an IT budget 41 41 00:01:14,930 --> 00:01:15,840 because you only have to have 42 42 00:01:15,840 --> 00:01:18,190 one physical computer or server 43 43 00:01:18,190 --> 00:01:20,730 and this might cost me $10,000 or $20,000, 44 44 00:01:20,730 --> 00:01:22,247 instead of having five or 10 of these 45 45 00:01:22,247 --> 00:01:24,350 $10,000 or $20,000 servers. 46 46 00:01:24,350 --> 00:01:26,160 This is going to allow us to consolidate 47 47 00:01:26,160 --> 00:01:27,580 all of our physical servers, 48 48 00:01:27,580 --> 00:01:30,850 saving us power, space, and cooling costs as well 49 49 00:01:30,850 --> 00:01:32,900 inside of our data centers. 50 50 00:01:32,900 --> 00:01:34,900 Now, the physical hardware can actually use 51 51 00:01:34,900 --> 00:01:36,920 multiple network interface cards 52 52 00:01:36,920 --> 00:01:38,340 and bind them all together 53 53 00:01:38,340 --> 00:01:40,840 using something known is link aggregation. 54 54 00:01:40,840 --> 00:01:43,040 And this can be used with other techniques as well 55 55 00:01:43,040 --> 00:01:44,840 to increase our available bandwidth 56 56 00:01:44,840 --> 00:01:46,490 because if I have one server 57 57 00:01:46,490 --> 00:01:47,710 that's running six or seven 58 58 00:01:47,710 --> 00:01:49,250 or eight virtual servers, 59 59 00:01:49,250 --> 00:01:51,030 one of my biggest limitations 60 60 00:01:51,030 --> 00:01:53,180 is going to be network connectivity. 61 61 00:01:53,180 --> 00:01:54,700 The machine and the operating system 62 62 00:01:54,700 --> 00:01:55,540 that we're going to use 63 63 00:01:55,540 --> 00:01:57,340 on this physical piece of hardware 64 64 00:01:57,340 --> 00:01:59,920 is what's known as our hypervisor. 65 65 00:01:59,920 --> 00:02:01,960 This is a specialized software 66 66 00:02:01,960 --> 00:02:04,080 that enables virtualization to occur 67 67 00:02:04,080 --> 00:02:05,970 on the physical machine. 68 68 00:02:05,970 --> 00:02:07,900 Now, the hypervisor is going to be 69 69 00:02:07,900 --> 00:02:10,560 the software that emulates our physical hardware 70 70 00:02:10,560 --> 00:02:13,440 for each of those six virtual machines inside of it. 71 71 00:02:13,440 --> 00:02:14,610 They are going to pretend and think 72 72 00:02:14,610 --> 00:02:16,990 that they each have their own physical hardware. 73 73 00:02:16,990 --> 00:02:19,160 But that physical server that they're seeing 74 74 00:02:19,160 --> 00:02:20,650 is actually just software 75 75 00:02:20,650 --> 00:02:23,170 that the hypervisor is giving to it. 76 76 00:02:23,170 --> 00:02:24,470 Now, this is what's known 77 77 00:02:24,470 --> 00:02:28,180 as a virtual machine monitor or a VMM. 78 78 00:02:28,180 --> 00:02:29,590 Now, what are some examples 79 79 00:02:29,590 --> 00:02:32,180 of popular hypervisors or VMMs? 80 80 00:02:32,180 --> 00:02:33,770 Well, one of the most popular ones 81 81 00:02:33,770 --> 00:02:36,030 is VMWare's ESXi, 82 82 00:02:36,030 --> 00:02:37,640 which is a great freeware program 83 83 00:02:37,640 --> 00:02:39,010 that anyone can use. 84 84 00:02:39,010 --> 00:02:41,130 There is also Microsoft's Hyper-V. 85 85 00:02:41,130 --> 00:02:42,567 There is Virtual Box, which again 86 86 00:02:42,567 --> 00:02:45,010 is another free open source product. 87 87 00:02:45,010 --> 00:02:47,200 And of course, VMWare's Workstation 88 88 00:02:47,200 --> 00:02:49,670 if we're doing it in a desktop environment. 89 89 00:02:49,670 --> 00:02:51,410 Now, there are two different types 90 90 00:02:51,410 --> 00:02:52,750 of hypervisors out there 91 91 00:02:52,750 --> 00:02:54,960 called type one and type two. 92 92 00:02:54,960 --> 00:02:56,210 Type one hypervisors 93 93 00:02:56,210 --> 00:02:57,810 are going to be where you have the OS, 94 94 00:02:57,810 --> 00:02:58,950 the operating system, 95 95 00:02:58,950 --> 00:03:01,310 sitting on top of your hypervisor 96 96 00:03:01,310 --> 00:03:02,230 and that's sitting directly 97 97 00:03:02,230 --> 00:03:03,780 on top of the hardware. 98 98 00:03:03,780 --> 00:03:05,360 Now, when you're dealing with type two, 99 99 00:03:05,360 --> 00:03:07,470 this is where you have a hosted environment. 100 100 00:03:07,470 --> 00:03:10,400 For example, I have a Macintosh desktop 101 101 00:03:10,400 --> 00:03:12,270 and I run Virtual Box in it. 102 102 00:03:12,270 --> 00:03:13,670 So, on my Mac hardware, 103 103 00:03:13,670 --> 00:03:15,610 I'm running a Mac operating system. 104 104 00:03:15,610 --> 00:03:17,530 And then on top of the Mac operating system, 105 105 00:03:17,530 --> 00:03:18,900 I'm running a hypervisor 106 106 00:03:18,900 --> 00:03:20,240 known as Virtual Box, 107 107 00:03:20,240 --> 00:03:21,840 and inside that hypervisor, 108 108 00:03:21,840 --> 00:03:23,260 I'm running Windows. 109 109 00:03:23,260 --> 00:03:24,260 Now, this is going to take up 110 110 00:03:24,260 --> 00:03:26,050 a lot more processing power 111 111 00:03:26,050 --> 00:03:27,060 but it works really well 112 112 00:03:27,060 --> 00:03:29,210 when dealing with a desktop environment. 113 113 00:03:29,210 --> 00:03:30,970 Now, for servers, on the other hand, 114 114 00:03:30,970 --> 00:03:33,380 it's much better to go and use a type one 115 115 00:03:33,380 --> 00:03:35,280 because I'm removing that extra layer 116 116 00:03:35,280 --> 00:03:36,300 of operating system, 117 117 00:03:36,300 --> 00:03:39,500 in my case, that Macintosh operating system, 118 118 00:03:39,500 --> 00:03:42,120 and doing what's known as a bare-bones hypervisor 119 119 00:03:42,120 --> 00:03:44,000 or bare-metal hypervisor 120 120 00:03:44,000 --> 00:03:45,580 that just runs the hypervisor 121 121 00:03:45,580 --> 00:03:46,900 as the operating system. 122 122 00:03:46,900 --> 00:03:49,360 And then, I can run the other operating systems 123 123 00:03:49,360 --> 00:03:50,280 that I want to host, 124 124 00:03:50,280 --> 00:03:52,400 like Windows Server, Mac, or Linux, 125 125 00:03:52,400 --> 00:03:53,930 inside the hypervisor. 126 126 00:03:53,930 --> 00:03:55,870 By removing that extra layer of software 127 127 00:03:55,870 --> 00:03:58,540 inside of the type two by moving to a type one, 128 128 00:03:58,540 --> 00:04:00,780 I am going to get better performance. 129 129 00:04:00,780 --> 00:04:02,260 Now, next thing we need to talk about 130 130 00:04:02,260 --> 00:04:04,100 is virtual storage solutions. 131 131 00:04:04,100 --> 00:04:05,750 With all these virtual servers, 132 132 00:04:05,750 --> 00:04:08,000 I have to have a place to store all of their data, 133 133 00:04:08,000 --> 00:04:09,220 and that can be really hard 134 134 00:04:09,220 --> 00:04:11,300 if you only have one physical server. 135 135 00:04:11,300 --> 00:04:12,470 So, we might look at things 136 136 00:04:12,470 --> 00:04:14,610 like a network attached storage device 137 137 00:04:14,610 --> 00:04:17,030 or a storage area network. 138 138 00:04:17,030 --> 00:04:19,360 Network attached storage or a NAS 139 139 00:04:19,360 --> 00:04:21,600 is a disk storage that's delivered as a service 140 140 00:04:21,600 --> 00:04:23,870 over your TCP/IP network. 141 141 00:04:23,870 --> 00:04:25,890 For example, here in my offices, 142 142 00:04:25,890 --> 00:04:28,040 we have two NAS servers. 143 143 00:04:28,040 --> 00:04:29,810 These each have a bunch of hard drives 144 144 00:04:29,810 --> 00:04:31,610 in our network and essentially allows 145 145 00:04:31,610 --> 00:04:33,720 anyone in the office to access it 146 146 00:04:33,720 --> 00:04:35,270 and use it for file storage 147 147 00:04:35,270 --> 00:04:37,320 over our TCP network. 148 148 00:04:37,320 --> 00:04:38,780 Now, the second way of doing things 149 149 00:04:38,780 --> 00:04:41,720 is using a SAN, or a storage area network, 150 150 00:04:41,720 --> 00:04:43,240 and this is becoming very common 151 151 00:04:43,240 --> 00:04:45,030 if you're using virtualized servers, 152 152 00:04:45,030 --> 00:04:47,560 like a data farm like Amazon Cloud Services 153 153 00:04:47,560 --> 00:04:49,840 or Google Cloud or Azure Cloud 154 154 00:04:49,840 --> 00:04:51,260 or something like that. 155 155 00:04:51,260 --> 00:04:52,780 When you have a storage area network, 156 156 00:04:52,780 --> 00:04:54,400 this is a very specialized type 157 157 00:04:54,400 --> 00:04:55,830 of local area network 158 158 00:04:55,830 --> 00:04:58,540 that's designed for data transfer and storage. 159 159 00:04:58,540 --> 00:05:01,370 They use fiber optic cables because of their high speed 160 160 00:05:01,370 --> 00:05:03,660 and they transfer data at a block level 161 161 00:05:03,660 --> 00:05:05,610 with a very specialized protocol 162 162 00:05:05,610 --> 00:05:08,440 instead of relying on a TCP/IP protocol 163 163 00:05:08,440 --> 00:05:10,190 like you use with a NAS. 164 164 00:05:10,190 --> 00:05:12,860 This allows it to become much, much faster 165 165 00:05:12,860 --> 00:05:14,530 in a standard NAS, and that's why 166 166 00:05:14,530 --> 00:05:16,140 storage area networks are used 167 167 00:05:16,140 --> 00:05:18,360 when you're doing a lot of heavy server activities 168 168 00:05:18,360 --> 00:05:21,320 and you need a big area of fast storage. 169 169 00:05:21,320 --> 00:05:22,520 Now, there is a third way 170 170 00:05:22,520 --> 00:05:24,210 of doing storage over a network, 171 171 00:05:24,210 --> 00:05:27,450 and this is known as a fiber channel or FC. 172 172 00:05:27,450 --> 00:05:29,570 Now, fiber channel can also be fiber channel 173 173 00:05:29,570 --> 00:05:31,760 over Ethernet, FCOE, 174 174 00:05:31,760 --> 00:05:34,330 or it's also known as iSCSI. 175 175 00:05:34,330 --> 00:05:37,370 Now, a fiber channel is a special purpose hardware 176 176 00:05:37,370 --> 00:05:40,220 that provides one to 16 gigabits per second 177 177 00:05:40,220 --> 00:05:42,200 of storage area network speed. 178 178 00:05:42,200 --> 00:05:43,730 So, it's basically a specialized type 179 179 00:05:43,730 --> 00:05:45,470 of storage area network. 180 180 00:05:45,470 --> 00:05:47,100 Fiber channel over Ethernet 181 181 00:05:47,100 --> 00:05:49,080 removed the need for specialized hardware 182 182 00:05:49,080 --> 00:05:51,320 and instead, ran your fiber channel 183 183 00:05:51,320 --> 00:05:53,610 over a regular Ethernet network. 184 184 00:05:53,610 --> 00:05:55,070 This allowed you to kind of put up 185 185 00:05:55,070 --> 00:05:58,160 this bundleness over a standard TCP/IP 186 186 00:05:58,160 --> 00:06:00,120 or Cat5 or Cat6 network, 187 187 00:06:00,120 --> 00:06:01,700 and that would help you reduce the cost 188 188 00:06:01,700 --> 00:06:03,360 and make it easier for the solution 189 189 00:06:03,360 --> 00:06:05,400 to be implemented in your network. 190 190 00:06:05,400 --> 00:06:07,930 Then, we have this thing known as iSCSI, 191 191 00:06:07,930 --> 00:06:11,790 and iSCSI is the IP Small Computer System Interface, 192 192 00:06:11,790 --> 00:06:13,270 And at a very low cost 193 193 00:06:13,270 --> 00:06:15,450 and it's built using Ethernet switches, 194 194 00:06:15,450 --> 00:06:17,920 but that also makes it have a limitation 195 195 00:06:17,920 --> 00:06:19,990 of less than 10 gigabits per second 196 196 00:06:19,990 --> 00:06:22,520 because again, our Ethernet, 197 197 00:06:22,520 --> 00:06:24,620 the fastest place of Cat6a 198 198 00:06:24,620 --> 00:06:26,380 or Cat7 is going to be limited 199 199 00:06:26,380 --> 00:06:28,270 to 10 gigabits per second. 200 200 00:06:28,270 --> 00:06:29,840 So, when you're dealing with iSCSI, 201 201 00:06:29,840 --> 00:06:31,950 it is slower but it is going to save you 202 202 00:06:31,950 --> 00:06:33,500 a bunch of money cause you don't have 203 203 00:06:33,500 --> 00:06:35,130 to deal with the fiber channel stuff 204 204 00:06:35,130 --> 00:06:36,950 and the dedicated hardware. 205 205 00:06:36,950 --> 00:06:38,530 This relies on configuration 206 206 00:06:38,530 --> 00:06:39,890 that allowed jumbo frames 207 207 00:06:39,890 --> 00:06:41,270 going over your network 208 208 00:06:41,270 --> 00:06:42,750 but again, it's slower, 209 209 00:06:42,750 --> 00:06:43,930 and it's not necessarily good 210 210 00:06:43,930 --> 00:06:45,500 for large network solutions 211 211 00:06:45,500 --> 00:06:48,020 that need fast high-quality storage. 212 212 00:06:48,020 --> 00:06:50,010 Now, I just mentioned jumbo frames. 213 213 00:06:50,010 --> 00:06:51,310 I think this is probably the first time 214 214 00:06:51,310 --> 00:06:52,780 we've talked about that. 215 215 00:06:52,780 --> 00:06:55,030 Now, by default when you get a frame 216 216 00:06:55,030 --> 00:06:56,770 that's going over your Ethernet, 217 217 00:06:56,770 --> 00:06:59,330 there is a maximum transmission unit size 218 218 00:06:59,330 --> 00:07:02,020 and the default is 1500. 219 219 00:07:02,020 --> 00:07:04,300 Now, with a jumbo frame, you're setting things 220 220 00:07:04,300 --> 00:07:06,930 that are bigger than 1500 MTUs 221 221 00:07:06,930 --> 00:07:08,960 or maximum transmission unit size. 222 222 00:07:08,960 --> 00:07:10,720 That's all a jumbo frame means. 223 223 00:07:10,720 --> 00:07:12,150 But you have to configure a network 224 224 00:07:12,150 --> 00:07:14,370 to support that cause otherwise, by default, 225 225 00:07:14,370 --> 00:07:16,610 it's going to drop those jumbo frames. 226 226 00:07:16,610 --> 00:07:18,300 Now, one of the new types of storage 227 227 00:07:18,300 --> 00:07:19,580 that's covered in this version 228 228 00:07:19,580 --> 00:07:22,140 of the Network+ is known as InfiniBand, 229 229 00:07:22,140 --> 00:07:24,890 and this is a newer virtualized storage technology. 230 230 00:07:24,890 --> 00:07:27,340 It is basically a switched fabric topology 231 231 00:07:27,340 --> 00:07:29,170 for high-performance computing. 232 232 00:07:29,170 --> 00:07:30,590 The throughput that we're talking about here 233 233 00:07:30,590 --> 00:07:33,310 is greater than 600 gigabits per second 234 234 00:07:33,310 --> 00:07:35,540 with very, very low latency 235 235 00:07:35,540 --> 00:07:37,350 of half a microsecond. 236 236 00:07:37,350 --> 00:07:39,130 It is extremely fast. 237 237 00:07:39,130 --> 00:07:40,710 It is extremely dedicated. 238 238 00:07:40,710 --> 00:07:42,650 And it is extremely expensive. 239 239 00:07:42,650 --> 00:07:43,960 Unless you're working at something 240 240 00:07:43,960 --> 00:07:45,620 like a cloud computing center 241 241 00:07:45,620 --> 00:07:47,510 or a really high-speed data center, 242 242 00:07:47,510 --> 00:07:48,830 you're probably not going to be dealing 243 243 00:07:48,830 --> 00:07:51,220 with InfiniBand any time soon. 244 244 00:07:51,220 --> 00:07:53,590 Now, this is a direct or switch connection 245 245 00:07:53,590 --> 00:07:54,800 that goes between the servers 246 246 00:07:54,800 --> 00:07:55,970 and the storage systems 247 247 00:07:55,970 --> 00:07:57,150 with these specialized plugs 248 248 00:07:57,150 --> 00:07:58,780 that you can see here on the screen. 249 249 00:07:58,780 --> 00:08:00,640 Now, again, where are you going to find these? 250 250 00:08:00,640 --> 00:08:02,660 High-performance computing centers. 251 251 00:08:02,660 --> 00:08:04,150 If you're running a very large 252 252 00:08:04,150 --> 00:08:05,950 high-capacity processing, 253 253 00:08:05,950 --> 00:08:07,890 high-capacity storage solution, 254 254 00:08:07,890 --> 00:08:09,700 you may want to look into InfiniBand. 255 255 00:08:09,700 --> 00:08:11,120 But for most of us who are working 256 256 00:08:11,120 --> 00:08:13,540 at small offices, home offices, 257 257 00:08:13,540 --> 00:08:15,110 medium-sized businesses, 258 258 00:08:15,110 --> 00:08:16,920 or even Fortune 500 companies, 259 259 00:08:16,920 --> 00:08:18,390 you're likely never going 260 260 00:08:18,390 --> 00:08:20,440 to run into an InfiniBand solution. 261 261 00:08:20,440 --> 00:08:22,600 This is an enterprise class solution 262 262 00:08:22,600 --> 00:08:24,180 for really big data centers 263 263 00:08:24,180 --> 00:08:26,190 who focus on big data. 264 264 00:08:26,190 --> 00:08:29,550 Next, we're going to talk about virtual firewalls and routers. 265 265 00:08:29,550 --> 00:08:31,170 So, going back to our first image, 266 266 00:08:31,170 --> 00:08:32,700 I have this virtual server 267 267 00:08:32,700 --> 00:08:34,860 with six or seven machines on it. 268 268 00:08:34,860 --> 00:08:35,870 Now, how am I going to connect 269 269 00:08:35,870 --> 00:08:37,840 all these virtual servers together? 270 270 00:08:37,840 --> 00:08:40,050 Because I don't have a router or a switch 271 271 00:08:40,050 --> 00:08:41,410 and enough plugs to plug everything 272 272 00:08:41,410 --> 00:08:43,060 into physical devices. 273 273 00:08:43,060 --> 00:08:45,600 Well, I can do it by using physical devices 274 274 00:08:45,600 --> 00:08:47,590 if I create enough network cards, 275 275 00:08:47,590 --> 00:08:50,790 or a better way is to virtualize those two. 276 276 00:08:50,790 --> 00:08:53,330 And to do that, we can fully virtualize our network 277 277 00:08:53,330 --> 00:08:54,810 and therefore, we're going to need 278 278 00:08:54,810 --> 00:08:56,670 virtual switches, virtual routers, 279 279 00:08:56,670 --> 00:08:58,430 and virtual firewalls. 280 280 00:08:58,430 --> 00:09:00,380 Now, different manufacturers are offering 281 281 00:09:00,380 --> 00:09:03,130 virtualized versions of their most popular devices. 282 282 00:09:03,130 --> 00:09:04,750 So, if you're a Cisco fan 283 283 00:09:04,750 --> 00:09:06,420 and you like their PIX firewall, 284 284 00:09:06,420 --> 00:09:09,230 you can go ahead and buy a virtual PIX firewall. 285 285 00:09:09,230 --> 00:09:10,640 If you like Cisco routers, 286 286 00:09:10,640 --> 00:09:11,780 you can buy a virtual one 287 287 00:09:11,780 --> 00:09:13,380 and they'll send you the software to install 288 288 00:09:13,380 --> 00:09:15,130 into your virtual environment. 289 289 00:09:15,130 --> 00:09:16,780 Virtualized routers and firewalls 290 290 00:09:16,780 --> 00:09:17,613 are going to provide you 291 291 00:09:17,613 --> 00:09:19,000 with all of the same features 292 292 00:09:19,000 --> 00:09:20,440 as their physical counterpart, 293 293 00:09:20,440 --> 00:09:22,460 without all that pesky wiring. 294 294 00:09:22,460 --> 00:09:24,830 Now, how do we designate a virtual firewall 295 295 00:09:24,830 --> 00:09:27,080 or a router on the diagram? 296 296 00:09:27,080 --> 00:09:28,780 We're going to use the exact same symbol 297 297 00:09:28,780 --> 00:09:30,930 we would for a firewall or a router 298 298 00:09:30,930 --> 00:09:32,100 and instead, we're going to put 299 299 00:09:32,100 --> 00:09:33,720 these little dashes around it. 300 300 00:09:33,720 --> 00:09:34,553 So, you can see here 301 301 00:09:34,553 --> 00:09:36,050 that it is a virtual router 302 302 00:09:36,050 --> 00:09:37,570 instead of a physical router 303 303 00:09:37,570 --> 00:09:38,870 because of these dashed lines 304 304 00:09:38,870 --> 00:09:40,880 instead of solid lines. 305 305 00:09:40,880 --> 00:09:42,760 So, in addition to these virtual routers 306 306 00:09:42,760 --> 00:09:43,860 and virtual firewalls, 307 307 00:09:43,860 --> 00:09:45,740 we also have virtual switches 308 308 00:09:45,740 --> 00:09:48,040 because again, we have to overcome that problem 309 309 00:09:48,040 --> 00:09:49,680 of all of these virtual servers 310 310 00:09:49,680 --> 00:09:51,640 being on one broadcast domain. 311 311 00:09:51,640 --> 00:09:53,120 If we have virtual switches, 312 312 00:09:53,120 --> 00:09:55,510 we can actually use layer two VLANs and trunking, 313 313 00:09:55,510 --> 00:09:57,690 like we learned about in the last section of the course, 314 314 00:09:57,690 --> 00:09:59,500 through these virtual switches. 315 315 00:09:59,500 --> 00:10:01,610 This also provides us with quality of service 316 316 00:10:01,610 --> 00:10:03,680 and security, and as you can see here, 317 317 00:10:03,680 --> 00:10:05,310 inside that blue box, 318 318 00:10:05,310 --> 00:10:07,410 that is going to be my virtual server. 319 319 00:10:07,410 --> 00:10:09,610 In there, I have three virtual servers 320 320 00:10:09,610 --> 00:10:11,500 on one physical piece of hardware, 321 321 00:10:11,500 --> 00:10:12,720 and I have a virtual switch 322 322 00:10:12,720 --> 00:10:14,610 with three different VLANs. 323 323 00:10:14,610 --> 00:10:17,420 Then that's connecting over a single network interface 324 324 00:10:17,420 --> 00:10:20,050 to a real switch in my real data center, 325 325 00:10:20,050 --> 00:10:22,150 and this is going to connect to a real router, 326 326 00:10:22,150 --> 00:10:24,730 and then connect out to the real Internet. 327 327 00:10:24,730 --> 00:10:27,520 Next, we want to talk about virtual desktops, 328 328 00:10:27,520 --> 00:10:29,320 and this is where you can run a desktop 329 329 00:10:29,320 --> 00:10:31,000 inside a web browser. 330 330 00:10:31,000 --> 00:10:33,370 You can use it from the web, a laptop, 331 331 00:10:33,370 --> 00:10:35,130 a tablet, a smartphone, 332 332 00:10:35,130 --> 00:10:37,790 and it's really great for people on the go. 333 333 00:10:37,790 --> 00:10:40,070 The thing I really love about virtual desktops, 334 334 00:10:40,070 --> 00:10:42,500 which we refer to as VDI, 335 335 00:10:42,500 --> 00:10:45,160 it's going to be a virtual desktop infrastructure, 336 336 00:10:45,160 --> 00:10:46,970 and they are going to be really easy to secure 337 337 00:10:46,970 --> 00:10:49,520 and really easy to upgrade because essentially, 338 338 00:10:49,520 --> 00:10:51,300 you get a brand-new desktop 339 339 00:10:51,300 --> 00:10:52,990 every time you log in. 340 340 00:10:52,990 --> 00:10:54,090 Because all that you're doing 341 341 00:10:54,090 --> 00:10:57,140 is creating a virtual file on a server. 342 342 00:10:57,140 --> 00:10:59,730 You're not having to actually build a new computer. 343 343 00:10:59,730 --> 00:11:01,470 So, the machine on your desk now 344 344 00:11:01,470 --> 00:11:03,374 just becomes a dumb device built to access 345 345 00:11:03,374 --> 00:11:05,940 this VDI environment. 346 346 00:11:05,940 --> 00:11:07,150 All of the important stuff 347 347 00:11:07,150 --> 00:11:09,080 is actually kept in my server room. 348 348 00:11:09,080 --> 00:11:10,260 And you can see here on the screen 349 349 00:11:10,260 --> 00:11:12,460 that I'm a user on the go with my tablet, 350 350 00:11:12,460 --> 00:11:13,800 and I'm sitting at Starbucks, 351 351 00:11:13,800 --> 00:11:15,570 and down here, I can then reach 352 352 00:11:15,570 --> 00:11:17,350 through the Internet to the router, 353 353 00:11:17,350 --> 00:11:19,660 to the switch, reach into my desktop, 354 354 00:11:19,660 --> 00:11:21,160 back up to my server farm, 355 355 00:11:21,160 --> 00:11:22,220 and get the data. 356 356 00:11:22,220 --> 00:11:24,150 And just as I was sitting at home 357 357 00:11:24,150 --> 00:11:25,840 or in the office, or at Starbucks, 358 358 00:11:25,840 --> 00:11:27,510 it all looks the same. 359 359 00:11:27,510 --> 00:11:28,860 It doesn't matter where I'm sitting. 360 360 00:11:28,860 --> 00:11:31,110 I can do all the same features. 361 361 00:11:31,110 --> 00:11:32,830 Virtual desktops are really starting 362 362 00:11:32,830 --> 00:11:34,919 to take over and they're really useful. 363 363 00:11:34,919 --> 00:11:37,710 Now, what are virtual desktops bad for? 364 364 00:11:37,710 --> 00:11:40,360 Well, if you have high-performance computing requirements 365 365 00:11:40,360 --> 00:11:43,170 like video editing, gaming, or desktop publishing, 366 366 00:11:43,170 --> 00:11:44,500 or any of those things that requires 367 367 00:11:44,500 --> 00:11:47,120 a lot of graphic and computing power behind it, 368 368 00:11:47,120 --> 00:11:50,160 virtual desktops is probably not for you. 369 369 00:11:50,160 --> 00:11:51,430 But for the average user 370 370 00:11:51,430 --> 00:11:52,750 who is surfing the Internet, 371 371 00:11:52,750 --> 00:11:54,980 doing PowerPoint and Word and Excel, 372 372 00:11:54,980 --> 00:11:57,280 virtual desktops are phenomenal, 373 373 00:11:57,280 --> 00:11:59,430 and they are really, really a great way 374 374 00:11:59,430 --> 00:12:00,730 to increase the security 375 375 00:12:00,730 --> 00:12:03,820 and lower your total cost of ownership overtime. 376 376 00:12:03,820 --> 00:12:06,660 Now, that is the textbook answer what I just gave you, 377 377 00:12:06,660 --> 00:12:08,710 that virtual desktops only work well 378 378 00:12:08,710 --> 00:12:10,630 for low performance requirements. 379 379 00:12:10,630 --> 00:12:13,170 But I will tell you here in 2020, 380 380 00:12:13,170 --> 00:12:15,170 that is not true anymore. 381 381 00:12:15,170 --> 00:12:16,900 It is true that there are actual 382 382 00:12:16,900 --> 00:12:19,290 gaming virtual desktops that you can get into. 383 383 00:12:19,290 --> 00:12:22,040 There are editing and video editing ones, as well. 384 384 00:12:22,040 --> 00:12:23,710 For instance, in my company, 385 385 00:12:23,710 --> 00:12:26,710 we actually have a subscription to shadow.tech, 386 386 00:12:26,710 --> 00:12:29,060 which is shadow PC is what it's called. 387 387 00:12:29,060 --> 00:12:30,710 You can log in through the cloud 388 388 00:12:30,710 --> 00:12:33,340 to this virtual desktop on their servers 389 389 00:12:33,340 --> 00:12:36,660 and it provides you full gaming PCs, 390 390 00:12:36,660 --> 00:12:38,590 and we actually use them for our video editing 391 391 00:12:38,590 --> 00:12:40,090 because they're really powerful. 392 392 00:12:40,090 --> 00:12:42,200 And so, for 25 or 30 bucks a month, 393 393 00:12:42,200 --> 00:12:44,370 we get access to a really powerful computer 394 394 00:12:44,370 --> 00:12:45,730 in the cloud and no matter 395 395 00:12:45,730 --> 00:12:47,530 where my video editors are in the world, 396 396 00:12:47,530 --> 00:12:49,910 they can log in, access all the information, 397 397 00:12:49,910 --> 00:12:51,060 and do what they need. 398 398 00:12:51,060 --> 00:12:53,470 But for the exam, when you hear about VDI, 399 399 00:12:53,470 --> 00:12:55,620 you want to think about low power desktops 400 400 00:12:55,620 --> 00:12:58,360 for your standard Word and PowerPoint and Internet, 401 401 00:12:58,360 --> 00:13:00,550 not something like a high-end gaming machine. 402 402 00:13:00,550 --> 00:13:02,190 I just wanted to go ahead and clarify that now 403 403 00:13:02,190 --> 00:13:03,800 because sometimes, I get students who say, 404 404 00:13:03,800 --> 00:13:06,670 but what about Shadow PCs, that's a VDI? 405 405 00:13:06,670 --> 00:13:08,250 And yeah, it is, and it's a great VDI 406 406 00:13:08,250 --> 00:13:09,700 and it works really, really well. 407 407 00:13:09,700 --> 00:13:10,790 But for an enterprise, 408 408 00:13:10,790 --> 00:13:12,000 generally you're going to use VDI 409 409 00:13:12,000 --> 00:13:13,840 for low performance requirements. 410 410 00:13:13,840 --> 00:13:14,673 All right, let's go back 411 411 00:13:14,673 --> 00:13:16,470 to your regularly scheduled lesson. 412 412 00:13:16,470 --> 00:13:17,970 And lastly, here we want to talk 413 413 00:13:17,970 --> 00:13:21,270 about software-defined networking or SDN. 414 414 00:13:21,270 --> 00:13:22,880 This is going to provide the administrator 415 415 00:13:22,880 --> 00:13:24,540 with an easy-to-use front end 416 416 00:13:24,540 --> 00:13:26,690 to configure physical and virtual devices 417 417 00:13:26,690 --> 00:13:27,960 throughout your network. 418 418 00:13:27,960 --> 00:13:29,100 All of your configurations 419 419 00:13:29,100 --> 00:13:30,480 can be automatically done 420 420 00:13:30,480 --> 00:13:32,450 by using software-defined networking. 421 421 00:13:32,450 --> 00:13:34,760 It is really great and as an administrator, 422 422 00:13:34,760 --> 00:13:37,300 you get an overview of your entire network. 423 423 00:13:37,300 --> 00:13:39,530 In the old days, before we had SDN, 424 424 00:13:39,530 --> 00:13:42,200 if I had three switches like I do all here on the left, 425 425 00:13:42,200 --> 00:13:43,600 and I wanted to configure them, 426 426 00:13:43,600 --> 00:13:44,770 I would need to go to each 427 427 00:13:44,770 --> 00:13:46,110 and every one of those switches, 428 428 00:13:46,110 --> 00:13:47,920 either logically or by remoting 429 429 00:13:47,920 --> 00:13:49,440 in using secure shell, 430 430 00:13:49,440 --> 00:13:51,200 and make my changes. 431 431 00:13:51,200 --> 00:13:53,290 Now, with software-defined networking, 432 432 00:13:53,290 --> 00:13:56,000 I just go to my software-defined networking controller, 433 433 00:13:56,000 --> 00:13:57,530 I make the change once there, 434 434 00:13:57,530 --> 00:13:59,210 and it pushes that configuration change 435 435 00:13:59,210 --> 00:14:00,780 across the entire network 436 436 00:14:00,780 --> 00:14:02,180 and all of my devices. 437 437 00:14:02,180 --> 00:14:03,780 It'll reconfigure the access list. 438 438 00:14:03,780 --> 00:14:05,520 It'll reconfigure the MAC filtering. 439 439 00:14:05,520 --> 00:14:07,040 And all those different things I need 440 440 00:14:07,040 --> 00:14:09,190 as part of software-defined networking. 441 441 00:14:09,190 --> 00:14:10,930 It changes the routers and the tables 442 442 00:14:10,930 --> 00:14:12,190 and all of that stuff, 443 443 00:14:12,190 --> 00:14:14,180 all from one centralized console. 444 444 00:14:14,180 --> 00:14:16,140 It is really great and it is a great way 445 445 00:14:16,140 --> 00:14:17,430 to virtualize your network 446 446 00:14:17,430 --> 00:14:19,050 when you're using virtual switches. 447 447 00:14:19,050 --> 00:14:21,080 And doing this can really consolidate it 448 448 00:14:21,080 --> 00:14:22,810 with your real-world stuff as well 449 449 00:14:22,810 --> 00:14:25,970 because SDN doesn't only have to work virtually, 450 450 00:14:25,970 --> 00:14:28,380 it can configure those physical devices too. 451 451 00:14:28,380 --> 00:14:29,213 And so, it is something 452 452 00:14:29,213 --> 00:14:30,660 you really need to take a look at 453 453 00:14:30,660 --> 00:14:32,713 as you get up into the networking world.