VMware THINAPP 4.6 - MIGRATING APPLICATIONS TECHNICAL NOTE Dokumentacja

VMware View Architecture PlanningView 4.6View Manager 4.6View Composer 2.6This document supports the version of each product listed andsupports all su

Figure 1-2. High-Level Example of a VMware View EnvironmentESX hosts runningVirtual Desktop virtual machinesViewConnectionServerViewAdministrator(bro

nAssigning applications packaged with VMware ThinApp to specific desktops and poolsnManaging local and remote desktop sessionsnEstablishing secure con

View AgentYou install the View Agent service on all virtual machines, physical systems, and Terminal Service servers thatyou use as sources for View d

View Transfer ServerThis software manages and streamlines data transfers between the datacenter and View desktops that arechecked out for use on end u

nQuery the event database.nQuery the state of View services.You can use the cmdlets in conjunction with the vSphere PowerCLI cmdlets, which provide an

Planning a Rich User Experience 2VMware View provides the familiar, personalized desktop environment that end users expect. End users canaccess USB an

Table 2-1. Features Supported on Operating Systems for View Desktops (Where View Agent Is Installed)FeatureWindows XPHome/ProSP3, 32-bitWindows Vista

Table 2-3. Features Supported on Mac Clients (Continued)Feature Mac OS X (10.5,6) Mac OS X (10.6)Smart cardsRSA SecurID X XSingle sign-on X XMultiple

Microsoft RDPRemote Desktop Protocol is the same protocol many people already use to access their work computer fromtheir home computer. RDP provides

View desktops in local mode behave in the same way as their remote desktop equivalents, yet can takeadvantage of local resources. Latency is eliminate

VMware View Architecture Planning2 VMware, Inc.You can find the most up-to-date technical documentation on the VMware Web site at:http://www.vmware.

The data on each local system is encrypted with AES. 128-bit encryption is the default, but you can configure192-bit or 256-bit encryption. The deskto

Streaming Multimedia to a View DesktopWyse MMR (multimedia redirection) enables full-fidelity playback when multimedia files are streamed to aView des

VMware View Architecture Planning22 VMware, Inc.

Managing Desktop Pools from aCentral Location 3You can create pools that include one or hundreds of virtual desktops. As a desktop source, you can use

nIf using vSphere 4.1, specify whether to use a Microsoft Sysprep customization specification or QuickPrepfrom VMware. Sysprep generates a unique SID

Reducing Storage Requirements with View ComposerBecause View Composer creates desktop images that share virtual disks with a base image, you can reduc

Deploying Applications and System Updates with View ComposerBecause linked-clone desktop pools share a base image, you can quickly deploy updates and

Using Existing Processes for Application ProvisioningWith VMware View, you can continue to use the application provisioning techniques that your compa

VMware View Architecture Planning28 VMware, Inc.

Architecture Design Elements andPlanning Guidelines 4A typical VMware View architecture design uses a building block strategy to achieve scalability.

ContentsVMware View Architecture Planning 5 1Introduction to VMware View 7Advantages of Using VMware View 7VMware View Features 9How the VMware View C

nEstimating Memory Requirements for Virtual Desktops on page 31RAM costs more for servers than it does for PCs. Because the cost of RAM is a high perc

Estimating Memory Requirements for Virtual DesktopsRAM costs more for servers than it does for PCs. Because the cost of RAM is a high percentage of ov

deleted when the virtual machines are powered off. Disposable page-fileredirection saves storage, slowing the growth of linked clones and also canimpr

Estimating CPU Requirements for Virtual DesktopsWhen estimating CPU, you must gather information about the average CPU utilization for various types o

The amount of storage space required must take into account the following files for each virtual desktop:nThe ESX suspend file is equivalent to the am

Desktop Pools for Specific Types of WorkersVMware View provides many features to help you conserve storage and reduce the amount of processingpower re

Pools for Task WorkersYou can standardize on stateless desktop images for task workers so that the image is always in a well-known,easily supportable

Pools for Mobile UsersThese users can check out a View desktop and run it locally on their laptop or desktop even without a networkconnection.View Cli

nDo not turn on SSL for provisioning or downloading local mode desktops.nIf the performance of View Connection Server is affected by the number of loc

Table 4-2. Desktop Virtual Machine Example for Windows XPItem ExampleOperating system 32-bit Windows XP (with the latest service pack)RAM 1GB (512MB

Implementing Best Practices to Secure Client Systems 56Assigning Administrator Roles 56Preparing to Use a Security Server 57Understanding VMware View

vCenter and View Composer Virtual Machine Configuration andDesktop Pool MaximumsYou install both vCenter Server and View Composer on the same virtual

View Connection Server Cluster Design ConsiderationsYou can deploy multiple replicated View Connection Server instances in a group to support load bal

Table 4-8. View Transfer Server Virtual Machine Example (Continued)Item ExampleVirtual network adapter E1000 (the default)1 NIC 1 GigabitStorage and

For example, in an 8-host cluster, where each host is capable of running 128 desktops, and the goal is to toleratea single server failure, make sure t

Figure 4-1. VMware View Building Block2 VMwareESX clustersVMware vCenter Server8 hosts 8 hostsshared storage2000 usersShared Storage for View Buildin

You can minimize these storm workloads through operational best practices, such as staggering updates todifferent virtual machines. You can also test

The following examples show how PCoIP can be expected to perform in various WAN scenarios:Work from homeA user with a dedicated cable or DSL connectio

Table 4-11. Example of a VMware View PodItem NumberView building blocks 5View Connection Servers 7 (1 for each building block and 2 spares)10Gb Ether

VMware View Architecture Planning48 VMware, Inc.

Planning for Security Features 5VMware View offers strong network security to protect sensitive corporate data. For added security, you canintegrate V

VMware View Architecture PlanningVMware View Architecture Planning provides an introduction to VMware View™, including a description of itsmajor featu

nTunneled Client Connections with Microsoft RDP on page 51When users connect to a View desktop with the Microsoft RDP display protocol, View Client ca

Tunneled Client Connections with Microsoft RDPWhen users connect to a View desktop with the Microsoft RDP display protocol, View Client can make a sec

View Client with Local Mode Client ConnectionsView Client with Local Mode offers mobile users the ability to check out View desktops onto their localc

Active Directory AuthenticationEach View Connection Server instance is joined to an Active Directory domain, and users are authenticatedagainst Active

Administrators can enable individual View Connection Server instances for smart card authentication.Enabling a View Connection Server instance to use

Restricting View Desktop AccessYou can use the restricted entitlements feature to restrict View desktop access based on the View ConnectionServer inst

You can also use restricted entitlements to control desktop access based on the user-authentication methodthat you configure for a particular View Con

An administrator can create folders to subdivide desktop pools and delegate the administration of specificdesktop pools to different administrators in

Security Server TopologiesYou can implement several different security server topologies.The topology illustrated in Figure 5-2 shows a high-availabil

Figure 5-3. Multiple Security ServersvCenterManagement ServerMicrosoftActive DirectoryViewConnectionServersload balancingViewSecurityServersDMZextern

VMware View Architecture Planning6 VMware, Inc.

Figure 5-4. Dual Firewall TopologyView Client View ClientHTTPStrafficHTTPStrafficfault-tolerantload balancingmechanismViewSecurityServerDMZinternalne

Back-End Firewall RulesTo allow a security server to communicate with each View Connection Server instance that resides within theinternal network, th

Figure 5-5. VMware View Components and Protocols Without a Security ServerViewAdministratorViewMessagingView Broker &Admin ServerView AgentView C

Figure 5-6. VMware View Components and Protocols with a Security ServerViewAdministratorViewMessagingView Broker &Admin ServerView AgentView Clie

Table 5-3. Default Ports (Continued)Protocol PortSOAP TCP port 80 or 443PCoIP TCP port 4172 from View Client to the View desktop.PCoIP also uses UDP

View LDAPView LDAP is an embedded LDAP directory in View Connection Server and is the configuration repositoryfor all VMware View configuration data.V

Table 5-5. TCP Ports Opened During View Agent Installation (Continued)Protocol PortsPCoIP 4172 (TCP and UDP)HP RGS 42966The View Agent installation p

Overview of Steps to Setting Up aVMware View Environment 6Complete these high-level tasks to install VMware View and configure an initial deployment.T

VMware View Architecture Planning68 VMware, Inc.

IndexSymbols.vmdk files 33AActive Directory 9, 27, 53ADM template files 56Administration Server 64administrator roles 56Adobe Flash 23agent, Vie

Introduction to VMware View 1With VMware View, IT departments can run virtual desktops in the datacenter and deliver desktops toemployees as a managed

front-end firewallconfiguring 59rules 60Ggateway server 64GPOs, security settings for View desktops 56HHA cluster 40, 42HP RGS 15, 18, 51II/O st

setup, VMware View 67shared storage 24, 44single sign-on (SSO) 12, 21, 54smart card authentication 53smart card readers 20, 53snapshots 26softwa

VMware View Architecture Planning72 VMware, Inc.

Figure 1-1. Administrative Console for View Manager Showing the Dashboard ViewAnother feature that increases convenience is the VMware remote display

VMware View FeaturesFeatures included in VMware View support usability, security, centralized control, and scalability.The following features provide