(upbeat music) >> Hey, welcome back everybody, Jeff Frick here with theCUBE. We are having a very special Cube conversation and kind of the the ongoing unveil, if you will, of the new VMware vSphere seven dot O. We're going to get a little bit more of a technical deep-dive here today and we're excited to have a longtime CUBE alumni. Kit Colbert here is the VP and CTO of Cloud platform at VMware. Kit, great to see you. >> Yeah, happy to be here. And new to theCUBE, Jared Rosoff. He's a Senior Director of Product Management of VMware and I'm guessing had a whole lot to do with this build. So Jared, first off, congratulations for birthing this new release and great to have you on board. >> Thanks, feels pretty great, great to be here. >> All right, so let's just jump into it. From kind of a technical aspect, what is so different about vSphere 7? >> Yeah, great. So vSphere 7 bakes Kubernetes right into the virtualization platform. And so this means that as a developer, I can now use Kubernetes to actually provision and control workloads inside of my vSphere environment. And it means as an IT admin, I'm actually able to deliver Kubernetes and containers to my developers really easily right on top of the platform I already run. >> So I think we had kind of a sneaking suspicion that that might be coming with the acquisition of the Heptio team. So really exciting news, and I think Kit, you teased it out quite a bit at VMware last year about really enabling customers to deploy workloads across environments, regardless of whether that's on-prem, public cloud, this public cloud, that public cloud, so this really is the realization of that vision. >> It is, yeah. So we talked at VMworld about Project Pacific, right, this technology preview. And as Jared mentioned of what that was, was how do we take Kubernetes and really build it into vSphere? As you know, we had a hybrid cloud vision for quite a while now. How do we proliferate vSphere to as many different locations as possible? Now part of the broader VMware cloud foundation portfolio. And you know, as we've gotten more and more of these instances in the cloud, on premises, at the edge, with service providers, there's a secondary question of how do we actually evolve that platform so it can support not just the existing workloads, but also modern workloads as well. >> Right. All right, so I think he brought some pictures for us, a little demo. So why don't we, >> Yeah. Why don't we jump over >> Yeah, let's dive into it. to there and let's see what it looks like? You guys can cue up the demo. >> Jared: Yeah, so we're going to start off looking at a developer actually working with the new VMware cloud foundation four and vSphere 7. So what you're seeing here is the developer's actually using Kubernetes to deploy Kubernetes. The self-eating watermelon, right? So the developer uses this Kubernetes declarative syntax where they can describe a whole Kubernetes cluster. And the whole developer experience now is driven by Kubernetes. They can use the coop control tool and all of the ecosystem of Kubernetes API's and tool chains to provision workloads right into vSphere. And so, that's not just provisioning workloads though, this is also key to the developer being able to explore the things they've already deployed. So go look at, hey, what's the IP address that got allocated to that? Or what's the CPU load on this workload I just deployed? On top of Kubernetes, we've integrated a Container Registry into vSphere. So here we see a developer pushing and pulling container images. And you know, one of the amazing things about this is from an infrastructure as code standpoint, now, the developer's infrastructure as well as their software is all unified in source control. I can check in not just my code, but also the description of the Kubernetes environment and storage and networking and all the things that are required to run that app. So now we're looking at a sort of a side-by-side view, where on the right hand side is the developer continuing to deploy some pieces of their application. And on the left hand side, we see vCenter. And what's key here is that as the developer deploys new things through Kubernetes, those are showing up right inside of the vCenter console. And so the developer and IT are seeing exactly the same things with the same names. And so this means when a developer calls, their IT department says, hey, I got a problem with my database. We don't spend the next hour trying to figure out which VM they're talking about. They got the same name, they see the same information. So what we're going to do is that, you know, we're going to push the the developer screen aside and start digging into the vSphere experience. And you know, what you'll see here is that vCenter is the vCenter you've already known and love, but what's different is that now it's much more application focused. So here we see a new screen inside of vCenter, vSphere namespaces. And so, these vSphere namespaces represent whole logical applications, like the whole distributed system now is a single object inside of vCenter. And when I click into one of these apps, this is a managed object inside of vSphere. I can click on permissions, and I can decide which developers have the permission to deploy or read the configuration of one of these namespaces. I can hook this into my Active Directory infrastructure. So I can use the same corporate credentials to access the system. I tap into all my existing storage. So this platform works with all of the existing vSphere storage providers. I can use storage policy based management to provide storage for Kubernetes. And it's hooked in with things like DRS, right? So I can define quotas and limits for CPU and memory, and all of that's going to be enforced by DRS inside the cluster. And again, as an admin, I'm just using vSphere. But to the developer, they're getting a whole Kubernetes experience out of this platform. Now, vSphere also now sucks in all this information from the Kubernetes environment. So besides seeing the VMs and things the developers have deployed, I can see all of the desired state specifications, all the different Kubernetes objects that the developers have created. The compute, network and storage objects, they're all integrated right inside the vCenter console. And so once again from a diagnostics and troubleshooting perspective, this data's invaluable. It often saves hours just in trying to figure out what we're even talking about when we're trying to resolve an issue. So as you can see, this is all baked right into vCenter. The vCenter experience isn't transformed a lot. We get a lot of VI admins who look at this and say, where's the Kubernetes? And they're surprised, they like, they've been managing Kubernetes all this time, it just looks like the vSphere experience they've already got. But all those Kubernetes objects, the pods and containers, Kubernetes clusters, load balancer, storage, they're all represented right there natively in the vCenter UI. And so we're able to take all of that and make it work for your existing VI admins. >> Well that's a, that's pretty wild, you know. It really builds off the vision that again, I think you kind of outlined, Kit, teased out it at VMworld which was the IT still sees vSphere, which is what they want to see, what they're used to seeing, but devs see Kubernetes. And really bringing those together in a unified environment so that, depending on what your job is, and what you're working on, that's what you're going to see and that's kind of unified environment. >> Yep. Yeah, as the demo showed, it is still vSphere at the center, but now there's two different experiences that you can have interacting with vSphere. The Kubernetes based one, which is of course great for developers and DevOps type folks, as well as a traditional vSphere interface, APIs, which is great for VI admins and IT operations. >> Right. And then, and really, it was interesting too. You teased out a lot. That was a good little preview if people knew what they were watching, but you talked about really cloud journey, and kind of this bifurcation of kind of classical school apps that are running in their classic VMs and then kind of the modern, you know, cloud native applications built on Kubernetes. And you outlined a really interesting thing that people often talk about the two ends of the spectrum and getting from one to the other but not really about kind of the messy middle, if you will. And this is really enabling people to pick where along that spectrum they can move their workloads or move their apps. >> Yeah, no. I think we think a lot about it like that. That we look at, we talk to customers and all of them have very clear visions on where they want to go. Their future state architecture. And that involves embracing cloud, it involves modernizing applications. And you know, as you mentioned, it's challenging for them because I think what a lot of customers see is this kind of, these two extremes. Either you're here where you are, with kind of the old current world, and you got the bright nirvana future on the far end there. And they believe that the only way to get there is to kind of make a leap from one side to the other. That you have to kind of change everything out from underneath you. And that's obviously very expensive, very time consuming and very error-prone as well. There's a lot of things that can go wrong there. And so I think what we're doing differently at VMware is really, to your point, is you call it the messy middle, I would say it's more like how do we offer stepping stones along that journey? Rather than making this one giant leap, we had to invest all this time and resources. How can we enable people to make smaller incremental steps each of which have a lot of business value but don't have a huge amount of cost? >> Right. And it's really enabling kind of this next gen application where there's a lot of things that are different about it but one of the fundamental things is where now the application defines the resources that it needs to operate versus the resources defining kind of the capabilities of what the application can do and that's where everybody is moving as quickly as makes sense, as you said, not all applications need to make that move but most of them should and most of them are and most of them are at least making that journey. So you see that? >> Yeah, definitely. I mean, I think that certainly this is one of the big evolutions we're making in vSphere from looking historically at how we managed infrastructure, one of the things we enable in vSphere 7 is how we manage applications, right? So a lot of the things you would do in infrastructure management of setting up security rules or encryption settings or you know, your resource allocation, you would do this in terms of your physical and virtual infrastructure. You talk about it in terms of this VM is going to be encrypted or this VM is going to have this Firewall rule. And what we do in vSphere 7 is elevate all of that to application centric management. So you actually look at an application and say I want this application to be constrained to this much CPU. Or I want this application to have these security rules on it. And so that shifts the focus of management really up to the application level. >> Jeff: Right. >> Yeah, and like, I would kind of even zoom back a little bit there and say, you know, if you look back, one thing we did with something like VSAN, before that, people had to put policies on a LUN, you know, an actual storage LUN and a storage array. And then by virtue of a workload being placed on that array, it inherited certain policies, right? And so VSAN really turned that around and allows you to put the policy on the VM. But what Jared's talking about now is that for a modern workload, a modern workload's not a single VM, it's a collection of different things. We got some containers in there, some VMs, probably distributed, maybe even some on-prem, some in the cloud, and so how do you start managing that more holistically? And this notion of really having an application as a first-class entity that you can now manage inside of vSphere, it's a really powerful and very simplifying one. >> Right. And why this is important is because it's this application centric point of view which enables the digital transformation that people are talking about all the time. That's a nice big word, but the rubber hits the road is how do you execute and deliver applications, and more importantly, how do you continue to evolve them and change them based on either customer demands or competitive demands or just changes in the marketplace? >> Yeah, well you look at something like a modern app that maybe has a hundred VMs that are part of it and you take something like compliance, right? So today, if I want to check if this app is compliant, I got to go look at every individual VM and make sure it's locked down, and hardened, and secured the right way. But now instead, what I can do is I can just look at that one application object inside of vCenter, set the right security settings on that, and I can be assured that all the different objects inside of it are going to inherit that stuff. So it really simplifies that. It also makes it so that that admin can handle much larger applications. You know, if you think about vCenter today you might log in and see a thousand VMs in your inventory. When you log in with vSphere 7, what you see is a few dozen applications. So a single admin can manage a much larger pool of infrastructure, many more applications than they could before because we automate so much of that operation. >> And it's not just the scale part, which is obviously really important, but it's also the rate of change. And this notion of how do we enable developers to get what they want to get done, done, i.e., building applications, while at the same time enabling the IT operations teams to put the right sort of guardrails in place around compliance and security, performance concerns, these sorts of elements. And so by being able to have the IT operations team really manage that logical application at that more abstract level and then have the developer be able to push in new containers or new VMs or whatever they need inside of that abstraction, it actually allows those two teams to work actually together and work together better. They're not stepping over each other but in fact now, they can both get what they need to get done, done, and do so as quickly as possible but while also being safe and in compliance and so forth. >> Right. So there's a lot more to this. This is a very significant release, right? Again, lot of foreshadowing if you go out and read the tea leaves, it's a pretty significant, you know, kind of re-architecture of many parts of vSphere. So beyond the Kubernetes, you know, kind of what are some of the other things that are coming out in this very significant release? >> Yeah, that's a great question because we tend to talk a lot about Kubernetes, what was Project Pacific but is now just part of vSphere, and certainly that is a very large aspect of it but to your point, vSphere 7 is a massive release with all sorts of other features. And so instead of a demo here, let's pull up some slides and we'll take a look at what's there. So outside of Kubernetes, there's kind of three main categories that we think about when we look at vSphere 7. So the first one is simplified lifecycle management. And then really focus on security is the second one, and then applications as well, but both including the cloud native apps that couldn't fit in the Kubernetes bucket as well as others. And so we go on the first one, the first column there, there's a ton of stuff that we're doing around simplifying lifecycle. So let's go to the next slide here where we can dive in a little bit more to the specifics. So we have this new technology, vSphere life cycle management, vLCM, and the idea here is how do we dramatically simplify upgrades, life cycle management of the ESX clusters and ESX hosts? How do we make them more declarative with a single image that you can now specify for an entire cluster. We find that a lot of our vSphere admins, especially at larger scales, have a really tough time doing this. There's a lot of in and outs today, it's somewhat tricky to do. And so we want to make it really really simple and really easy to automate as well. >> Right. So if you're doing Kubernetes on Kubernetes, I suppose you're going to have automation on automation, right? Because upgrading to the seven is probably not an inconsequential task. >> And yeah, and going forward and allowing, you know, as we start moving to deliver a lot of this great vSphere functionality at a more rapid clip, how do we enable our customers to take advantage of all those great things we're putting out there as well? >> Right. Next big thing you talk about is security. >> Yep. >> And we just got back from RSA, thank goodness we got that show in before all the madness started. >> Yep. >> But everyone always talked about security's got to be baked in from the bottom to the top. So talk about kind of the changes in the security. >> So, done a lot of things around security. Things around identity federation, things around simplifying certificate management, you know, dramatic simplifications there across the board. One I want to focus on here on the next slide is actually what we call vSphere trust authority. And so with that one what we're looking at here is how do we reduce the potential attack surfaces and really ensure there's a trusted computing base? When we talk to customers, what we find is that they're nervous about a lot of different threats including even internal ones, right? How do they know all the folks that work for them can be fully trusted? And obviously if you're hiring someone, you somewhat trust them but you know, how do you implement the concept of lease privilege? Right? >> Right. >> Jeff: Or zero trust, right, is a very hot topic >> Yeah, exactly. in security. >> So the idea with trust authority is that we can specify a small number of physical ESX hosts that you can really lock down and ensure are fully secure. Those can be managed by a special vCenter server which is in turn very locked down, only a few people have access to it. And then those hosts and that vCenter can then manage other hosts that are untrusted and can use attestation to actually prove that okay, this untrusted host haven't been modified, we know they're okay so they're okay to actually run workloads on they're okay to put data on and that sort of thing. So it's this kind of like building block approach to ensure that businesses can have a very small trust base off of which they can build to include their entire vSphere environment. >> Right. And then the third kind of leg of the stool is, you know, just better leveraging, you know, kind of a more complex asset ecosystem, if you will, with things like FPGAs and GPUs and you know, >> Yeah. kind of all of the various components that power these different applications which now the application can draw the appropriate resources as needed, so you've done a lot of work there as well. >> Yeah, there's a ton of innovation happening in the hardware space. As you mentioned, all sorts of accelerateds coming out. We all know about GPUs, and obviously what they can do for machine learning and AI type use cases, not to mention 3-D rendering. But you know, FPGAs and all sorts of other things coming down the pike as well there. And so what we found is that as customers try to roll these out, they have a lot of the same problems that we saw on the very early days of virtualization. I.e., silos of specialized hardware that different teams were using. And you know, what you find is all things we found before. You find very low utilization rates, inability to automate that, inability to manage that well, put in security and compliance and so forth. And so this is really the reality that we see at most customers. And it's funny because, and so much you think, well wow, shouldn't we be past this? As an industry, shouldn't we have solved this already? You know, we did this with virtualization. But as it turns out, the virtualization we did was for compute, and then storage and network, but now we really need to virtualize all these accelerators. And so that's where this Bitfusion technology that we're including now with vSphere really comes to the forefront. So if you see in the current slide we're showing here, the challenges that just these separate pools of infrastructure, how do you manage all that? And so if you go to the, if we go to the next slide what we see is that with Bitfusion, you can do the same thing that we saw with compute virtualization. You can now pool all these different silos infrastructure together so they become one big pool of GPUs of infrastructure that anyone in an organization can use. We can, you know, have multiple people sharing a GPU. We can do it very dynamically. And the great part of it is is that it's really easy for these folks to use. They don't even need to think about it. In fact, integrates seamlessly with their existing workflows. >> So it's pretty interesting 'cause of the classifications of the assets now are much larger, much varied, and much more workload specific, right? That's really the opportunity slash challenge that you guys are addressing. >> They are. >> A lot more diverse, yep. And so like, you know, a couple other things just, now, I don't have a slide on it, but just things we're doing to our base capabilities. Things around DRS and VMotion. Really massive evolutions there as well to support a lot of these bigger workloads, right? So you look at some of the massive SAP HANA, or Oracle Databases. And how do we ensure that VMotion can scale to handle those without impacting their performance or anything else there. Making DRS smarter about how it does load balancing and so forth. >> Jeff: Right. >> So a lot of the stuff is not just kind of brand new, cool new accelerator stuff, but it's also how do we ensure the core apps people have already been running for many years, we continue to keep up with the innovation and scale there as well. >> Right. All right, so Jared, I give you the last word. You've been working on this for a while, there's a whole bunch of admins that have to sit and punch keys. What do you tell them, what should they be excited about, what are you excited for them in this new release? >> I think what I'm excited about is how, you know, IT can really be an enabler of the transformation of modern apps, right? I think today you look at a lot of these organizations and what ends up happening is the app team ends up sort of building their own infrastructure on top of IT's infrastructure, right? And so now I think we can shift that story around. I think that there's, you know, there's an interesting conversation that a lot of IT departments and app dev teams are going to be having over the next couple years about how do we really offload some of these infrastructure tasks from the dev team, make you more productive, give you better performance, availability, disaster recovery, and these kinds of capabilities. >> Awesome. Well, Jared, congratulation, again both of you, for you getting the release out. I'm sure it was a heavy lift and it's always good to get it out in the world and let people play with it and thanks for sharing a little bit more of a technical deep-dive. I'm sure there's a ton more resources for people that even want to go down into the weeds. So thanks for stopping by. >> Thank you. >> Thank you. >> All right, he's Jared, he's Kit, I'm Jeff. You're watching theCUBE. We're in the Palo Alto studios. Thanks for watching and we'll see you next time. (upbeat music)

(upbeat music) >> Hey, welcome back everybody, Jeff Frick here with theCUBE. We are having a very special CUBE conversation and kind of the the ongoing unveil, if you will, of the new VMware vSphere 7.0. We're going to get a little bit more of a technical deep-dive here today and we're excited to have a longtime CUBE alumni. Kit Colbert here is the VP and CTO of Cloud platform at VMware. Kit, great to see you. >> Yeah, happy to be here. And new to theCUBE, Jared Rosoff. He's a Senior Director of Product Management of VMware and I'm guessing had a whole lot to do with this build. So Jared, first off, congratulations for birthing this new release and great to have you on board. >> Thanks, feels pretty great, great to be here. >> All right, so let's just jump into it. From kind of a technical aspect, what is so different about vSphere 7? >> Yeah, great. So vSphere 7 bakes Kubernetes right into the virtualization platform. And so this means that as a developer, I can now use Kubernetes to actually provision and control workloads inside of my vSphere environment. And it means as an IT admin, I'm actually able to deliver Kubernetes and containers to my developers really easily right on top of the platform I already run. >> So I think we had kind of a sneaking suspicion that that might be coming with the acquisition of the Heptio team. So really exciting news, and I think Kit, you teased it out quite a bit at VMware last year about really enabling customers to deploy workloads across environments, regardless of whether that's on-prem, public cloud, this public cloud, that public cloud, so this really is the realization of that vision. >> It is, yeah. So we talked at VMworld about Project Pacific, right, this technology preview. And as Jared mentioned of what that was, was how do we take Kubernetes and really build it into vSphere? As you know, we had a hybrid cloud vision for quite a while now. How do we proliferate vSphere to as many different locations as possible? Now part of the broader VMware cloud foundation portfolio. And you know, as we've gotten more and more of these instances in the cloud, on premises, at the edge, with service providers, there's a secondary question of how do we actually evolve that platform so it can support not just the existing workloads, but also modern workloads as well. >> Right. All right, so I think he brought some pictures for us, a little demo. So why don't we, >> Yeah. Why don't we jump over >> Yeah, let's dive into it. to there and let's see what it looks like? You guys can cue up the demo. >> Jared: Yeah, so we're going to start off looking at a developer actually working with the new VMware cloud foundation four and vSphere 7. So what you're seeing here is the developer's actually using Kubernetes to deploy Kubernetes. The self-eating watermelon, right? So the developer uses this Kubernetes declarative syntax where they can describe a whole Kubernetes cluster. And the whole developer experience now is driven by Kubernetes. They can use the coop control tool and all of the ecosystem of Kubernetes API's and tool chains to provision workloads right into vSphere. And so, that's not just provisioning workloads though, this is also key to the developer being able to explore the things they've already deployed. So go look at, hey, what's the IP address that got allocated to that? Or what's the CPU load on this workload I just deployed? On top of Kubernetes, we've integrated a Container Registry into vSphere. So here we see a developer pushing and pulling container images. And you know, one of the amazing things about this is from an infrastructure as code standpoint, now, the developer's infrastructure as well as their software is all unified in source control. I can check in not just my code, but also the description of the Kubernetes environment and storage and networking and all the things that are required to run that app. So now we're looking at a sort of a side-by-side view, where on the right hand side is the developer continuing to deploy some pieces of their application. And on the left hand side, we see vCenter. And what's key here is that as the developer deploys new things through Kubernetes, those are showing up right inside of the vCenter console. And so the developer and IT are seeing exactly the same things with the same names. And so this means when a developer calls, their IT department says, hey, I got a problem with my database. We don't spend the next hour trying to figure out which VM they're talking about. They got the same name, they see the same information. So what we're going to do is that, you know, we're going to push the the developer screen aside and start digging into the vSphere experience. And you know, what you'll see here is that vCenter is the vCenter you've already known and love, but what's different is that now it's much more application focused. So here we see a new screen inside of vCenter, vSphere namespaces. And so, these vSphere namespaces represent whole logical applications, like the whole distributed system now is a single object inside of vCenter. And when I click into one of these apps, this is a managed object inside of vSphere. I can click on permissions, and I can decide which developers have the permission to deploy or read the configuration of one of these namespaces. I can hook this into my Active Directory infrastructure. So I can use the same corporate credentials to access the system. I tap into all my existing storage. So this platform works with all of the existing vSphere storage providers. I can use storage policy based management to provide storage for Kubernetes. And it's hooked in with things like DRS, right? So I can define quotas and limits for CPU and memory, and all of that's going to be enforced by DRS inside the cluster. And again, as an admin, I'm just using vSphere. But to the developer, they're getting a whole Kubernetes experience out of this platform. Now, vSphere also now sucks in all this information from the Kubernetes environment. So besides seeing the VMs and things the developers have deployed, I can see all of the desired state specifications, all the different Kubernetes objects that the developers have created. The compute, network and storage objects, they're all integrated right inside the vCenter console. And so once again from a diagnostics and troubleshooting perspective, this data's invaluable. It often saves hours just in trying to figure out what we're even talking about when we're trying to resolve an issue. So as you can see, this is all baked right into vCenter. The vCenter experience isn't transformed a lot. We get a lot of VI admins who look at this and say, where's the Kubernetes? And they're surprised, they like, they've been managing Kubernetes all this time, it just looks like the vSphere experience they've already got. But all those Kubernetes objects, the pods and containers, Kubernetes clusters, load balancer, storage, they're all represented right there natively in the vCenter UI. And so we're able to take all of that and make it work for your existing VI admins. >> Well that's a, that's pretty wild, you know. It really builds off the vision that again, I think you kind of outlined, Kit, teased out it at VMworld which was the IT still sees vSphere, which is what they want to see, what they're used to seeing, but devs see Kubernetes. And really bringing those together in a unified environment so that, depending on what your job is, and what you're working on, that's what you're going to see and that's kind of unified environment. >> Yep. Yeah, as the demo showed, it is still vSphere at the center, but now there's two different experiences that you can have interacting with vSphere. The Kubernetes based one, which is of course great for developers and DevOps type folks, as well as a traditional vSphere interface, APIs, which is great for VI admins and IT operations. >> Right. And then, and really, it was interesting too. You teased out a lot. That was a good little preview if people knew what they were watching, but you talked about really cloud journey, and kind of this bifurcation of kind of classical school apps that are running in their classic VMs and then kind of the modern, you know, cloud native applications built on Kubernetes. And you outlined a really interesting thing that people often talk about the two ends of the spectrum and getting from one to the other but not really about kind of the messy middle, if you will. And this is really enabling people to pick where along that spectrum they can move their workloads or move their apps. >> Yeah, no. I think we think a lot about it like that. That we look at, we talk to customers and all of them have very clear visions on where they want to go. Their future state architecture. And that involves embracing cloud, it involves modernizing applications. And you know, as you mentioned, it's challenging for them because I think what a lot of customers see is this kind of, these two extremes. Either you're here where you are, with kind of the old current world, and you got the bright nirvana future on the far end there. And they believe that the only way to get there is to kind of make a leap from one side to the other. That you have to kind of change everything out from underneath you. And that's obviously very expensive, very time consuming and very error-prone as well. There's a lot of things that can go wrong there. And so I think what we're doing differently at VMware is really, to your point, is you call it the messy middle, I would say it's more like how do we offer stepping stones along that journey? Rather than making this one giant leap, we had to invest all this time and resources. How can we enable people to make smaller incremental steps each of which have a lot of business value but don't have a huge amount of cost? >> Right. And it's really enabling kind of this next gen application where there's a lot of things that are different about it but one of the fundamental things is where now the application defines the resources that it needs to operate versus the resources defining kind of the capabilities of what the application can do and that's where everybody is moving as quickly as makes sense, as you said, not all applications need to make that move but most of them should and most of them are and most of them are at least making that journey. So you see that? >> Yeah, definitely. I mean, I think that certainly this is one of the big evolutions we're making in vSphere from looking historically at how we managed infrastructure, one of the things we enable in vSphere 7 is how we manage applications, right? So a lot of the things you would do in infrastructure management of setting up security rules or encryption settings or you know, your resource allocation, you would do this in terms of your physical and virtual infrastructure. You talk about it in terms of this VM is going to be encrypted or this VM is going to have this Firewall rule. And what we do in vSphere 7 is elevate all of that to application centric management. So you actually look at an application and say I want this application to be constrained to this much CPU. Or I want this application to have these security rules on it. And so that shifts the focus of management really up to the application level. >> Jeff: Right. >> Yeah, and like, I would kind of even zoom back a little bit there and say, you know, if you look back, one thing we did with something like VSAN, before that, people had to put policies on a LUN, you know, an actual storage LUN and a storage array. And then by virtue of a workload being placed on that array, it inherited certain policies, right? And so VSAN really turned that around and allows you to put the policy on the VM. But what Jared's talking about now is that for a modern workload, a modern workload's not a single VM, it's a collection of different things. We got some containers in there, some VMs, probably distributed, maybe even some on-prem, some in the cloud, and so how do you start managing that more holistically? And this notion of really having an application as a first-class entity that you can now manage inside of vSphere, it's a really powerful and very simplifying one. >> Right. And why this is important is because it's this application centric point of view which enables the digital transformation that people are talking about all the time. That's a nice big word, but the rubber hits the road is how do you execute and deliver applications, and more importantly, how do you continue to evolve them and change them based on either customer demands or competitive demands or just changes in the marketplace? >> Yeah, well you look at something like a modern app that maybe has a hundred VMs that are part of it and you take something like compliance, right? So today, if I want to check if this app is compliant, I got to go look at every individual VM and make sure it's locked down, and hardened, and secured the right way. But now instead, what I can do is I can just look at that one application object inside of vCenter, set the right security settings on that, and I can be assured that all the different objects inside of it are going to inherit that stuff. So it really simplifies that. It also makes it so that that admin can handle much larger applications. You know, if you think about vCenter today you might log in and see a thousand VMs in your inventory. When you log in with vSphere 7, what you see is a few dozen applications. So a single admin can manage a much larger pool of infrastructure, many more applications than they could before because we automate so much of that operation. >> And it's not just the scale part, which is obviously really important, but it's also the rate of change. And this notion of how do we enable developers to get what they want to get done, done, i.e., building applications, while at the same time enabling the IT operations teams to put the right sort of guardrails in place around compliance and security, performance concerns, these sorts of elements. And so by being able to have the IT operations team really manage that logical application at that more abstract level and then have the developer be able to push in new containers or new VMs or whatever they need inside of that abstraction, it actually allows those two teams to work actually together and work together better. They're not stepping over each other but in fact now, they can both get what they need to get done, done, and do so as quickly as possible but while also being safe and in compliance and so forth. >> Right. So there's a lot more to this. This is a very significant release, right? Again, lot of foreshadowing if you go out and read the tea leaves, it's a pretty significant, you know, kind of re-architecture of many parts of vSphere. So beyond the Kubernetes, you know, kind of what are some of the other things that are coming out in this very significant release? >> Yeah, that's a great question because we tend to talk a lot about Kubernetes, what was Project Pacific but is now just part of vSphere, and certainly that is a very large aspect of it but to your point, vSphere 7 is a massive release with all sorts of other features. And so instead of a demo here, let's pull up some slides and we'll take a look at >> Already? what's there. So outside of Kubernetes, there's kind of three main categories that we think about when we look at vSphere 7. So the first one is simplified lifecycle management. And then really focused on security is the second one, and then applications as well, but both including the cloud native apps that couldn't fit in the Kubernetes bucket as well as others. And so we go on the first one, the first column there, there's a ton of stuff that we're doing around simplifying lifecycle. So let's go to the next slide here where we can dive in a little bit more to the specifics. So we have this new technology, vSphere life cycle management, vLCM, and the idea here is how do we dramatically simplify upgrades, life cycle management of the ESX clusters and ESX hosts? How do we make them more declarative with a single image that you can now specify for an entire cluster. We find that a lot of our vSphere admins, especially at larger scales, have a really tough time doing this. There's a lot of in and outs today, it's somewhat tricky to do. And so we want to make it really really simple and really easy to automate as well. >> Right. So if you're doing Kubernetes on Kubernetes, I suppose you're going to have automation on automation, right? Because upgrading to the seven is probably not an inconsequential task. >> And yeah, and going forward and allowing, you know, as we start moving to deliver a lot of this great vSphere functionality at a more rapid clip, how do we enable our customers to take advantage of all those great things we're putting out there as well? >> Right. Next big thing you talk about is security. >> Yep. >> And we just got back from RSA, thank goodness we got that show in before all the madness started. >> Yep. >> But everyone always talked about security's got to be baked in from the bottom to the top. So talk about kind of the changes in the security. >> So, done a lot of things around security. Things around identity federation, things around simplifying certificate management, you know, dramatic simplifications there across the board. One I want to focus on here on the next slide is actually what we call vSphere trust authority. And so with that one what we're looking at here is how do we reduce the potential attack surfaces and really ensure there's a trusted computing base? When we talk to customers, what we find is that they're nervous about a lot of different threats including even internal ones, right? How do they know all the folks that work for them can be fully trusted? And obviously if you're hiring someone, you somewhat trust them but you know, how do you implement the concept of lease privilege? Right? >> Right. >> Jeff: Or zero trust, right, is a very hot topic >> Yeah, exactly. in security. >> So the idea with trust authority is that we can specify a small number of physical ESX hosts that you can really lock down and ensure are fully secure. Those can be managed by a special vCenter server which is in turn very locked down, only a few people have access to it. And then those hosts and that vCenter can then manage other hosts that are untrusted and can use attestation to actually prove that okay, this untrusted host haven't been modified, we know they're okay so they're okay to actually run workloads on they're okay to put data on and that sort of thing. So it's this kind of like building block approach to ensure that businesses can have a very small trust base off of which they can build to include their entire vSphere environment. >> Right. And then the third kind of leg of the stool is, you know, just better leveraging, you know, kind of a more complex asset ecosystem, if you will, with things like FPGAs and GPUs and you know, >> Yeah. kind of all of the various components that power these different applications which now the application can draw the appropriate resources as needed, so you've done a lot of work there as well. >> Yeah, there's a ton of innovation happening in the hardware space. As you mentioned, all sorts of accelerateds coming out. We all know about GPUs, and obviously what they can do for machine learning and AI type use cases, not to mention 3-D rendering. But you know, FPGAs and all sorts of other things coming down the pike as well there. And so what we found is that as customers try to roll these out, they have a lot of the same problems that we saw on the very early days of virtualization. I.e., silos of specialized hardware that different teams were using. And you know, what you find is all things we found before. You find very low utilization rates, inability to automate that, inability to manage that well, put in security and compliance and so forth. And so this is really the reality that we see at most customers. And it's funny because, and so much you think, well wow, shouldn't we be past this? As an industry, shouldn't we have solved this already? You know, we did this with virtualization. But as it turns out, the virtualization we did was for compute, and then storage and network, but now we really need to virtualize all these accelerators. And so that's where this Bitfusion technology that we're including now with vSphere really comes to the forefront. So if you see in the current slide we're showing here, the challenges that just these separate pools of infrastructure, how do you manage all that? And so if you go to the, if we go to the next slide what we see is that with Bitfusion, you can do the same thing that we saw with compute virtualization. You can now pool all these different silos infrastructure together so they become one big pool of GPUs of infrastructure that anyone in an organization can use. We can, you know, have multiple people sharing a GPU. We can do it very dynamically. And the great part of it is is that it's really easy for these folks to use. They don't even need to think about it. In fact, integrates seamlessly with their existing workflows. >> So it's pretty interesting 'cause of the classifications of the assets now are much larger, much varied, and much more workload specific, right? That's really the opportunity / challenge that you guys are addressing. >> They are. >> A lot more diverse, yep. And so like, you know, a couple other things just, now, I don't have a slide on it, but just things we're doing to our base capabilities. Things around DRS and vMotion. Really massive evolutions there as well to support a lot of these bigger workloads, right? So you look at some of the massive SAP HANA, or Oracle Databases. And how do we ensure that vMotion can scale to handle those without impacting their performance or anything else there. Making DRS smarter about how it does load balancing and so forth. >> Jeff: Right. >> So a lot of the stuff is not just kind of brand new, cool new accelerator stuff, but it's also how do we ensure the core apps people have already been running for many years, we continue to keep up with the innovation and scale there as well. >> Right. All right, so Jared, I give you the last word. You've been working on this for a while, there's a whole bunch of admins that have to sit and punch keys. What do you tell them, what should they be excited about, what are you excited for them in this new release? >> I think what I'm excited about is how, you know, IT can really be an enabler of the transformation of modern apps, right? I think today you look at a lot of these organizations and what ends up happening is the app team ends up sort of building their own infrastructure on top of IT's infrastructure, right? And so now I think we can shift that story around. I think that there's, you know, there's an interesting conversation that a lot of IT departments and app dev teams are going to be having over the next couple years about how do we really offload some of these infrastructure tasks from the dev team, make you more productive, give you better performance, availability, disaster recovery, and these kinds of capabilities. >> Awesome. Well, Jared, congratulation, again both of you, for you getting the release out. I'm sure it was a heavy lift and it's always good to get it out in the world and let people play with it and thanks for sharing a little bit more of a technical deep-dive. I'm sure there's a ton more resources for people that even want to go down into the weeds. So thanks for stopping by. >> Thank you. >> Thank you. >> All right, he's Jared, he's Kit, I'm Jeff. You're watching theCUBE. We're in the Palo Alto studios. Thanks for watching and we'll see you next time. (upbeat music)

(bright upbeat music) >> Hello and welcome to the Palo Alto Studios, theCube. I'm John Furrier, we here for a special Cube Conversation and special report, big news from VMware to discuss the launch of the availability of vSphere 7. I'm here with Krish Prasad SVP and General Manager of the vSphere Business and Cloud Platform Business Unit. And Paul Turner, VP of vSphere Product Management. Guys, thanks for coming in and talking about the big news. >> Thank you for having us. >> You guys announced some interesting things back in March around containers, Kubernetes and vSphere. Krish, tell us about the hard news what's being announced? >> Today we are announcing the general availability of vSphere 7. John, it's by far the biggest release that we have done in the last 10 years. We premiered it as project Pacific few months ago. With this release, we are putting Kubernetes native support into the vSphere platform. What that allows us to do is give customers the ability to run both modern applications based on Kubernetes and containers, as well as traditional VM based applications on the same platform. And it also allows the IT departments to provide their developers, cloud operating model using the VMware cloud foundation that is powered by this release. This is a key part of our (murmurs) portfolio solutions and products that we announced this year. And it is targeted fully at the developers of modern applications. >> And the specific news is vSphere.. >> Seven is generally available. >> Generally a vSphere 7? >> Yes. >> So let's on the trend line here, the relevance is what? What's the big trend line, that this is riding obviously we saw the announcements at VMware last year, and throughout the year, there's a lot of buzz. Pat Gelsinger says, "There's a big wave here with Kubernetes." What does this announcement mean for you guys with the marketplace trend? >> Yes what Kubernetes is really about is people trying to have an agile operation, they're trying to modernize the IT applications. And the best way to do that, is build off your current platform, expand it and make it a an innovative, an Agile Platform for you to run Kubernetes applications and VM applications together. And not just that customers are also looking at being able to manage a hybrid cloud environment, both on-prem and public cloud together. So they want to be able to evolve and modernize their application stack, but modernize their infrastructure stack, which means hybrid cloud operations with innovative applications Kubernetes or container based applications and VMs. >> What's exciting about this trend, Krish, we were talking about this at VMworld last year, we had many conversations around cloud native, but you're seeing cloud native becoming the operating model for modern business. I mean, this is really the move to the cloud. If you look at the successful enterprises, leaving the suppliers, the on premises piece, if not moved to the cloud native marketplace technologies, the on-premise isn't effective. So it's not so much on-premises going away, we know it's not, but it's turning into cloud native. This is the move to the cloud generally, this is a big wave. >> Yeah, absolutely. I mean, John, if you think about it on-premise, we have, significant market share, we are by far the leader in the market. And so what we are trying to do with this, is to allow customers to use the current platform they are using, but bring their modern application development on top of the same platform. Today, customers tend to set up stacks, which are different, so you have a Kubernetes stack, you have stack for the traditional applications, you have operators and administrators who are specialized in Kubernetes on one side, and you have the traditional VM operators on the other side. With this move, what we are saying is that you can be on the same common platform, you can have the same administrators who are used to administering the environment that you already had, and at the same time, offer the developers what they like, which is Kubernetes dial-tone, that they can come and deploy their applications on the same platform that you use for traditional applications. >> Yeah, Paul, Pat said Kubernetes can be the dial-tone of the internet. Most millennials might even know what dial-tone is. But what he meant is that's the key fabric, that's going to orchestrate. And we've heard over the years skill gap, skill gap, not a lot of skills out there. But when you look at the reality of skills gap, it's really about skills gaps and shortages, not enough people, most CIOs and chief information security officers, that we talk to, say, I don't want to fork my development teams, I don't want to have three separate teams, I don't have to, I want to have automation, I want an operating model that's not going to be fragmented. This kind of speaks to this whole idea of, interoperability and multi cloud. This seems to be the next big way behind hybrid. >> I think it is the next big wave, the thing that customers are looking for is a cloud operating model. They like the ability for developers to be able to invoke new services on demand in a very agile way. And we want to bring that cloud operating model to on-prem, to Google Cloud, to Amazon cloud to Microsoft Cloud to any of our VCPP partners. You get the same cloud operating experience. And it's all driven by a Kubernetes based dial-tone that's effective and available within this platform. So by bringing a single infrastructure platform that can run in this hybrid manner, and give you the cloud operating agility the developers are looking for, that's what's key in version seven. >> Does Pat Gelsinger mean when he says dial-tone of the internet Kubernetes. Does he mean always on? or what does he mean specifically? Just that it's always available? what's the meaning behind that phrase? >> The first thing he means is that developers can come to the infrastructure, which is, The VMware Cloud Foundation, and be able to work with a set of API's that are Kubernetes API's. So developers understand that, they are looking for that. They understand that dial-tone, right? And you come to our VMware cloud foundation that runs across all these clouds, you get the same API set that you can use to deploy that application. >> Okay, so let's get into the value here of vSphere 7, how does VMware and vSphere 7 specifically help customers? Isn't just bolting on Kubernetes to vSphere, some will say is that's simple or (murmurs) you're running product management no, it's not that easy. Some people say, "He is bolting Kubernetes on vSphere." >> it's not that easy. So one of the things, if anybody has actually tried deploying Kubernetes, first, it's highly complicated. And so definitely one of the things that we're bringing is you call it a bolt on, but it's certainly not like that we are making it incredibly simple. You talked about IT operational shortages, customers want to be able to deploy Kubernetes environments in a very simple way. The easiest way that you can do that is take your existing environment that route 90% of IT, and just turn on the Kubernetes dial-tone, and it is as simple as that. Now, it's much more than that, in version seven, as well, we're bringing in a couple things that are very important. You also have to be able to manage at scale, just like you would in the cloud, you want to be able to have infrastructure, almost self manage and upgrade and lifecycle manage itself. And so we're bringing in a new way of managing infrastructure so that you can manage just large scale environments, both on-premise and public cloud environments at scale. And then associated with that as well is you must make it secure. So there's a lot of enhancements we're building into the platform around what we call intrinsic security, which is how can we actually build in a truly a trusted platform for your developers and IT. >> I was just going to touch on your point about this, the shortage of IT staff, and how we are addressing that here. The way we are addressing that, is that the IT administrators that are used to administering vSphere can continue to administer this enhanced platform with Kubernetes, the same way they administered the older releases, so they don't have to learn anything new. They are just working the same way. We are not changing any tools, process, technologies. >> So same as it was before? >> Same as before. >> More capability. >> More capability. And developers can come in and they see new capabilities around Kubernetes. So it's a best of both worlds. >> And what was the pain point that you guys are solving? Obviously, the ease of use is critical, obviously, operationally, I get that. As you look at the cloud native developer cycles, infrastructure as code means, as app developers, on the other side, taking advantage of it. What's the real pain point that you guys are solving with vSphere 7. >> So I think it's multiple factors. So first is we've talked about agility a few times, there is DevOps is a real trend inside an IT organizations. They need to be able to build and deliver applications much quicker, they need to be able to respond to the business. And to do that, what they are doing is they need infrastructure that is on demand. So what we're really doing in the core Kubernetes kind of enablement, is allowing that on demand fulfillment of infrastructure, so you get that agility that you need. But it's not just tied to modern applications. It's also all of your existing business applications and your monitoring applications on one platform, which means that you've got a very simple and low cost way of managing large scale IT infrastructure. So that's a huge piece as well. And then I do want to emphasize a couple of other things. We're also bringing in new capabilities for AI and ML applications for SAP HANA databases, where we can actually scale to some of the largest business applications out there. And you have all of the capabilities like the GPU awareness and FPGA awareness that we built into the platform, so that you can truly run this as the fastest accelerated platform for your most extreme applications. So you've got the ability to run those applications, as well as your Kubernetes and Container based application. >> That's the accelerated application innovation piece of the announcement right? >> That's right, yeah. It's quite powerful that we've actually brought in, basically new hardware awareness into the product and expose that to your developers, whether that's through containers or through VMs. >> Krish, I want to get your thoughts on the ecosystem and then the community but I want to just dig into one feature you mentioned. I get the lifestyle improvement, life lifecycle improvement, I get the application acceleration innovation, but the intrinsic security is interesting. Could you take a minute, explain what that is? >> Yeah, so there's a few different aspects. One is looking at how can we actually provide a trusted environment. And that means that you need to have a way that the key management that even your administrator is not able to get keys to the kingdom, as we would call it. You want to have a controlled environment that, some of the worst security challenges inside in some of the companies has been your internal IT staff. So you've got to have a way that you can run a trusted environment independent. We've got vSphere Trust Authority that we released in version seven, that actually gives you a secure environment for actually managing your keys to the kingdom effectively your certificates. So you've got this, continuous runtime. Now, not only that, we've actually gone and taken our carbon black features, and we're actually building in full support for carbon black into the platform. So that you've got native security of even your application ecosystem. >> Yeah, that's been coming up a lot conversations, the carbon black and the security piece. Krish obviously vSphere everywhere having that operating model makes a lot of sense, but you have a lot of touch points, you got cloud, hyper scalars got the edge, you got partners. >> We have that dominant market share on private cloud. We are on Amazon, as you will know, Azure, Google, IBM Cloud, Oracle Cloud. So all the major clouds, there is a vSphere stack running. So it allows customers if you think about it, it allows customers to have the same operating model, irrespective of where their workload is residing. They can set policies, components, security, they set it once, it applies to all their environments across this hybrid cloud, and it's all supported by our VMware Cloud Foundation, which is powered by vSphere 7. >> Yeah, I think having that, the cloud as API based having connection points and having that reliable easy to use is critical operating model. Alright guys, so let's summarize the announcement. What do you guys their takeaway from this vSphere 7, what is the bottom line? What's it really mean? (Paul laughs) >> I think what we're, if we look at it for developers, we are democratizing Kubernetes. We already are in 90% of IT environments out there are running vSphere. We are bringing to every one of those vSphere environments and all of the virtual infrastructure administrators, they can now manage Kubernetes environments, you can you can manage it by simply upgrading your environment. That's a really nice position rather than having independent kind of environments you need to manage. So I think that is one of the key things that's in here. The other thing though, I don't think any other platform out there, other than vSphere that can run in your data center in Google's, in Amazon's, in Microsoft's, in thousands of VCPP partners. You have one hybrid platform that you can run with. And that's got operational benefits, that's got efficiency benefits, that's got agility benefits. >> Great. >> Yeah, I would just add to that and say that, look, we want to meet customers, where they are in their journey. And we want to enable them to make business decisions without technology getting in the way. And I think the announcement that we made today, with vSphere 7, is going to help them accelerate their digital transformation journey, without making trade offs on people, process and technology. And there is more to come. Look, we are laser focused on making our platform the best in the industry, for running all kinds of applications and the best platform for a hybrid and multi cloud. And so you will see more capabilities coming in the future. Stay tuned. >> Well, one final question on this news announcement, which is awesome, vSphere, core product for you guys, if I'm the customer, tell me why it's going to be important five years from now? >> Because of what I just said, it is the only platform that is going to be running across all the public clouds, which will allow you to have an operational model that is consistent across the cloud. So think about it. If you go to Amazon native, and then you have a workload in Azure, you're going to have different tools, different processes, different people trained to work with those clouds. But when you come to VMware and you use our Cloud Foundation, you have one operating model across all these environments, and that's going to be game changing. >> Great stuff, great stuff. Thanks for unpacking that for us. Congratulations on the announcement. >> Thank you. >> vSphere 7, news special report here, inside theCube cCnversation, I'm John Furrier. Thanks for watching. (upbeat music) >> Hey welcome back everybody, Jeff Frick here with theCube. We are having a very special Cube Conversation and kind of the the ongoing unveil, if you will of the new VMware vSphere 7.0 we're going to get a little bit more of a technical deep dive here today we're excited to have longtime Cube alumni, Kit Colbert here, is the VP and CTO of Cloud Platform at VMware. Kit, great to see you. And, and new to theCube, Jared Rosoff. He's a Senior Director of Product Management VMware, and I'm guessing had a whole lot to do with this build. So Jared, first off, congratulations for birthing this new release. And great to have you on board. >> Feels pretty good, great to be here. >> All right, so let's just jump into it. From kind of a technical aspect, what is so different about vSphere 7? >> Yeah, great. So vSphere 7, bakes Kubernetes right into the virtualization platform. And so this means that as a developer, I can now use Kubernetes to actually provision and control workloads inside of my vSphere environment. And it means as an IT admin, I'm actually able to deliver Kubernetes and containers to my developers really easily right on top of the platform I already run. >> So I think we had kind of a sneaking suspicion that might be coming with the acquisition of the FTO team. So really exciting news. And I think Kit you tease it out quite a bit at VMware last year about really enabling customers to deploy workloads across environments, regardless of whether that's on-prem, public cloud, this public cloud, that public cloud. So this really is the realization of that vision. >> It is, yeah. So, we talked at VMworld about project Pacific, this technology preview, and as Jared mentioned, what that was, is how do we take Kubernetes and really build it into vSphere. As you know, we had Hybrid Cloud Vision for quite a while now. How do we proliferate vSphere to as many different locations as possible. Now part of the broader VMware Cloud Foundation portfolio. And as we've gotten more and more of these instances in the cloud on-premises, at the edge, with service providers, there's a secondary question, how do we actually evolve that platform? So it can support not just the existing workloads, but also modern workloads as well. >> All right. So I think you brought some pictures for us a little demo. So why (murmurs) and let's see what it looks like. You guys can keep the demo? >> Narrator: So we're going to start off looking at a developer actually working with the new VMware Cloud Foundation for and vSphere 7. So what you're seeing here is a developer is actually using Kubernetes to deploy Kubernetes. The selfie in watermelon, (all laughing) So the developer uses this Kubernetes declarative syntax where they can describe a whole Kubernetes cluster. And the whole developer experience now is driven by Kubernetes. They can use the coop control tool and all of the ecosystem of Kubernetes API's and tool chains to provision workloads right into vSphere. And so, that's not just provisioning workloads, though. This is also key to the developer being able to explore the things they've already deployed, so go look at, hey, what's the IP address that got allocated to that? Or what's the CPU load on this workload I just deployed. On top of Kubernetes, we've integrated a Container Registry into vSphere. So here we see a developer pushing and pulling container images. And one of the amazing things about this is, from an infrastructure is code standpoint. Now, the developers infrastructure as well as their software is all unified in source control. I can check in, not just my code, but also the description of the Kubernetes environment and storage and networking and all the things that are required to run that app. So now we're looking at sort of a side by side view, where on the right hand side is the developer continuing to deploy some pieces of their application and on the left hand side, we see vCenter. And what's key here is that as the developer deploys new things through Kubernetes, those are showing up right inside of the vCenter console. And so the developer and IT are seeing exactly the same things, the same names, and so this means what a developer calls their IT department and says, "Hey, I got a problem with my database," we don't spend the next hour trying to figure out which VM they're talking about. They got the same name, they see the same information. So what we're going to do is that, we're going to push the the developer screen aside and start digging into the vSphere experience. And what you'll see here is that vCenter is the vCenter you've already known and love, but what's different is that now it's much more application focused. So here we see a new screen inside of vCenter vSphere namespaces. And so these vSphere namespaces represent whole logical applications, like the whole distributed system now as a single object inside of vCenter. And when I click into one of these apps, this is a managed object inside of vSphere. I can click on permissions, and I can decide which developers have the permission to deploy or read the configuration of one of these namespaces. I can hook this into my active directory infrastructure, so I can use the same, corporate credentials to access the system, I tap into all my existing storage. So, this platform works with all of the existing vSphere storage providers. I can use storage policy based management to provide storage for Kubernetes. And it's hooked in with things like DRS, right? So I can define quotas and limits for CPU and memory, and all that's going to be enforced by DRS inside the cluster. And again, as an admin, I'm just using vSphere, but to the developer, they're getting a whole Kubernetes experience out of this platform. Now, vSphere also now sucks in all this information from the Kubernetes environment. So besides, seeing the VMs and things that developers have deployed, I can see all of the desired state specifications, all the different Kubernetes objects that the developers have created, the compute network and storage objects, they're all integrated right inside the vCenter console. And so once again, from a diagnostics and troubleshooting perspective, this data is invaluable, often saves hours, just to try to figure out what we're even talking about more trying to resolve an issue. So, as you can see, this is all baked right into vCenter. The vCenter experience isn't transformed a lot, we get a lot of VI admins who look at this and say, "Where's the Kubernetes?" And they're surprised. They're like, they've been managing Kubernetes all this time, it just looks, it looks like the vSphere experience they've already got. But all those Kubernetes objects, the pods and containers, Kubernetes clusters, load balancer stores, they're all represented right there natively in the vCenter UI. And so we're able to take all of that and make it work for your existing VI admins. >> Well, it's pretty wild. It really builds off the vision that again, I think you kind of outlined Kit teased out at VMworld, which was, the IT still sees vSphere, which is what they want to see, what they're used to seeing, but (murmurs) see Kubernetes and really bringing those together in a unified environment. So that, depending on what your job is and what you're working on, that's what you're going to see in this kind of unified environment. >> Yeah, as the demo showed, (clears throat) it is still vSphere at the center, but now there's two different experiences that you can have interacting with vSphere, Kubernetes base one, which is of course great for developers and DevOps type folks, as well as the traditional vSphere interface API's, which is great for VI admins and IT operations. >> And then it really is interesting too, you tease that a lot. That was a good little preview, people knew they're watching. But you talked about really cloud journey and kind of this bifurcation of kind of classical school apps that are that are running in their classic VMs, and then kind of the modern, kind of cloud native applications built on Kubernetes. And you outlined a really interesting thing that people often talk about the two ends of the spectrum, and getting from one to the other, but not really about kind of the messy middle, if you will, and this is really enabling people to pick where along that spectrum, they can move their workloads or move their apps. >> Yeah, I think we think a lot about it like that, we talk to customers, and all of them have very clear visions on where they want to go, their future state architecture. And that involves embracing cloud and involves modernizing applications. And you know, as you mentioned, it's challenging for them. Because I think what a lot of customers see is this kind of these two extremes either you're here where you are, kind of the old current world, and you got the bright Nirvana future on the far end there. And they believe that the only way to get there is to kind of make a leap from one side to the other, they have to kind of change everything out from underneath you. And that's obviously very expensive, very time consuming, and very error prone as well. There's a lot of things that can go wrong there. And so I think what we're doing differently at VMware is really to your point as you call it, the messy middle, I would say it's more like, how do we offer stepping stones along that journey? Rather than making this one giant leap we had to invest all this time and resources? How can we enable people to make smaller incremental steps, each of which have a lot of business value, but don't have a huge amount of cost? >> And it's really enabling kind of this next gen application, where there's a lot of things that are different about it. But one of the fundamental things is where now the application defines the resources that it needs to operate, versus the resources defining kind of the capabilities what the application can do. And that's where everybody is moving as quickly as makes sense. As you said, not all applications need to make that move, but most of them should, and most of them are, and most of them are at least making that journey. Do you see that? >> Yeah, definitely. I mean, I think that, certainly this is one of the big evolutions we're making in vSphere from, looking historically at how we managed infrastructure, one of the things we enable in vSphere 7, is how we manage applications. So a lot of the things you would do in infrastructure management of setting up security rules or encryption settings, or, your resource allocation, you would do this in terms of your physical and virtual infrastructure, you talk about it in terms of, this VM is going to be encrypted, or this VM is going to have this firewall rule. And what we do in vSphere 7 is elevate all of that to application centric management. So you actually look at an application and say, I want this application to be constrained to this much CPU. Or I want this application to have these security rules on it. And so that shifts the focus of management really up to the application level. >> And like, I can even zoom back a little bit there and say, if you look back, one thing we did was something like vSAN before that people had to put policies on a LAN an actual storage LAN, and a storage array. And then by virtue of a workload being placed on that array, inherited certain policies. And so, vSAN will turn that around allows you to put the policy on the VM. But what Jared is talking about now is that for a modern workload, a modern workloads is not a single VM, it's a collection of different things. You got some containers in there, some VMs, probably distributed, maybe even some on-prem, some on the cloud. And so how do you start managing that more holistically? And this notion of really having an application as a first class entity that you can now manage inside of vSphere is really powerful and very simplified one. >> And why this is important is because it's this application centric point of view, which enables the digital transformation that people are talking about all the time. That's a nice big word, but when the rubber hits the road is how do you execute and deliver applications. And more importantly, how do you continue to evolve them and change them, based on on either customer demands or competitive demands, or just changes in the marketplace. >> Yeah when you look at something like a modern app that maybe has 100 VMs that are part of it, and you take something like compliance. So today, if I want to check if this app is compliant, I got to go look at every individual VM and make sure it's locked down hardened and secured the right way. But now instead, what I can do is I can just look at that one application object inside of vCenter, set the right security settings on that and I can be assured that all the different objects inside of it are going to inherit that stuff. So it really simplifies that. It also makes it so that that admin can handle much larger applications. If you think about vCenter today, you might log in and see 1000 VMs in your inventory. When you log in with vSphere 7, what you see is few dozen applications. So a single admin can manage much larger pool of infrastructure, many more applications than they could before. Because we automate so much of that operation. >> And it's not just the scale part, which is obviously really important, but it's also the rate of change. And this notion of how do we enable developers to get what they want to get done, done, i.e. building applications, while at the same time enabling the IT operations teams to put the right sort of guardrails in place around compliance and security performance concerns, these sorts of elements. And so being by being able to have the IT operations team really manage that logical application at that more abstract level, and then have the developer be able to push in new containers or new VMs or whatever they need inside of that abstraction. It actually allows those two teams to work actually together and work together better. They're not stepping over each other. But in fact, now they can both get what they need to get done, done, and do so as quickly as possible but while also being safe, and in compliance, and so forth. >> So there's a lot more to this, this is a very significant release, right? Again, a lot of foreshadowing, if you go out and read the tea leaves, it's a pretty significant kind of re-architecture of many, many parts of vSphere. So beyond the Kubernetes, kind of what are some of the other things that are coming out in this very significant release? >> Yeah, that's a great question, because we tend to talk a lot about Kubernetes, what was Project Pacific, but it's now just part of vSphere. And certainly, that is a very large aspect of it. But to your point, vSphere 7 is a massive release with all sorts of other features. And so there is a demo here, let's pull up some slides. And we're ready to take a look at what's there. So, outside of Kubernetes, there's kind of three main categories that we think about when we look at vSphere 7. So the first first one is simplified Lifecycle Management. And then really focused on security as a second one, and then applications as well, but both including, the cloud native apps that could fit in the Kubernetes bucket as well as others. And so we go on the first one, the first column there, there's a ton of stuff that we're doing, around simplifying life cycles. So let's go to the next slide here where we can dive in a little bit more to the specifics. So we have this new technology vSphere Lifecycle Management, vLCM. And the idea here is how do we dramatically simplify upgrades, lifecycle management of the ESX clusters and ESX hosts? How do we make them more declarative, with a single image, you can now specify for an entire cluster. We find that a lot of our vSphere admins, especially at larger scales, have a really tough time doing this. There's a lot of ins and outs today, it's somewhat tricky to do. And so we want to make it really, really simple and really easy to automate as well. >> So if you're doing Kubernetes on Kubernetes, I suppose you're going to have automation on automation, because upgrading to the sevens is probably not an inconsequential task. >> And yeah, and going forward and allowing you as we start moving to deliver a lot of this great VCR functionality at a more rapid clip. How do we enable our customers to take advantage of all those great things we're putting out there as well. >> Next big thing you talk about is security. >> Yep >> We just got back from RSA. Thank goodness, we got that show in before all the badness started. But everyone always talks about security is got to be baked in from the bottom to the top. Talk about kind of the the changes in the security. >> So I've done a lot of things around security, things around identity federation, things around simplifying certificate management, dramatic simplifications they're across the board. What I want to focus on here, on the next slide is actually what we call vSphere Trust Authority. And so with that one, what we're looking at here is how do we reduce the potential attack surfaces, and really ensure there's a trusted computing base? When we talk to customers, what we find is that they're nervous about a lot of different threats, including even internal ones, right? How do they know all the folks that work for them can be fully trusted. And obviously, if you're hiring someone, you somewhat trust them. How do you implement the concept of least privilege. >> Jeff: Or zero trust (murmurs) >> Exactly. So they idea with trust authority that we can specify a small number of physical ESX hosts that you can really lock down ensure a fully secure, those can be managed by a special vCenter Server, which is in turn very locked down, only a few people have access to it. And then those hosts and that vCenter can then manage other hosts that are untrusted and can use attestation to actually prove that, okay, this untrusted host haven't been modified, we know they're okay, so they're okay to actually run workloads or they're okay to put data on and that sort of thing. So it's this kind of like building block approach to ensure that businesses can have a very small trust base off of which they can build to include their entire vSphere environment. >> And then the third kind of leg of the stool is, just better leveraging, kind of a more complex asset ecosystem, if you will, with things like FPGAs and GPUs, and kind of all of the various components that power these different applications which now the application can draw the appropriate resources as needed. So you've done a lot of work there as well. >> Yeah, there's a ton of innovation happening in the hardware space, as you mentioned, all sorts of accelerators coming out. We all know about GPUs, and obviously what they can do for machine learning and AI type use cases, not to mention 3D rendering. But FPGAs, and all sorts of other things coming down the pike as well there. And so what we found is that as customers try to roll these out, they have a lot of the same problems that we saw in the very early days of virtualization, i.e. silos of specialized hardware that different teams were using. And what you find is, all the things we found before you find very low utilization rates, inability to automate that, inability to manage that well, putting security and compliance and so forth. And so this is really the reality that we see in most customers and it's funny because, and sometimes you think, "Wow, shouldn't we be past this?" As an industry should we have solved this already, we did this with virtualization. But as it turns out, the virtualization we did was for compute and then storage network. But now we really need to virtualize all these accelerators. And so that's where this bit fusion technology that we're including now with vSphere, really comes to the forefront. So if you see in the current slide, we're showing here, the challenges that just these separate pools of infrastructure, how do you manage all that? And so if the we go to the next slide, what we see is that, with that fusion, you can do the same thing that we saw with compute virtualization, you can now pool all these different silos infrastructure together. So they become one big pool of GPUs of infrastructure that anyone in an organization can use. We can, have multiple people sharing a GPU, we can do it very dynamically. And the great part of it is that it's really easy for these folks to use. They don't even need to think about it, in fact, integrates seamlessly with their existing workflows. >> So it's free, it's pretty cheap, because the classifications of the assets now are much, much larger, much varied and much more workload specific right. That's really the opportunity slash challenge there. >> They are a lot more diverse And so like, a couple other things just, I don't have a slide on it, but just things we're doing to our base capabilities, things around DRS and vMotion. Really massive evolutions there as well to support a lot of these bigger workloads, right. So you look at some of the massive SAP HANA or Oracle databases, and how do we ensure that vMotion can scale to handle those, without impacting their performance or anything else there? Making DRS smarter about how it does load balancing, and so forth. So a lot of the stuff not just kind of brand new, cool new accelerator stuff, but it's also how do we ensure the core as people have already been running for many years, we continue to keep up with the innovation and scale there as well. >> All right. So Jared I give you the last word. You've been working on this for a while. There's a whole bunch of admins that have to sit and punch keys. What do you tell them? What should they be excited about? What are you excited for them in this new release? >> I think what I'm excited about is how IT can really be an enabler of the transformation of modern apps. I think today, you look at all of these organizations, and what ends up happening is, the app team ends up sort of building their own infrastructure on top of IT infrastructure. And so, now, I think we can shift that story around. I think that there's an interesting conversation that a lot of IT departments and app dev teams are going to be having over the next couple of years about how do we really offload some of these infrastructure tasks from the dev team? Make you more productive, give you better performance, availability, disaster recovery and these kinds of capabilities. >> Awesome. Well, Jared, congratulation and Kit both of you for getting the release out. I'm sure it was a heavy lift. And it's always good to get it out in the world and let people play with it. And thanks for for sharing a little bit more of a technical deep dive into this ton more resources for people that didn't want to go down into the weeds. So thanks for stopping by. >> Thank you. >> Thank you. >> Alright, he's Jared, he's Kit, I'm Jeff. You're watching theCube. We're in the Palo Alto Studios. Thanks for watching, we'll see you next time. (upbeat music) >> Hi, and welcome to a special Cube Conversation. I'm Stu Miniman, and we're digging into VMware vSphere 7 announcement. We've had conversations with some of the executives some of the technical people, but we know that there's no better way to really understand the technology than to talk to some of the practitioners that are using it. So really happy to have joined me on the program. I have Philip Buckley-Mellor, who is an infrastructure designer with British Telecom joining me digitally from across the pond. Phil, thanks so much for joining us. >> Nice too. >> Alright, so Phil, let's start of course, British Telecom, I think most people know, you know what BT is and it's, really sprawling company. Tell us a little bit about, your group, your role and what's your mandate. >> Okay, so, my group is called service platforms. It's the bit of BT that services all of our multi millions of our customers. So we have broadband, we have TV, we have mobile, we have DNS and email systems. And it's all about our customers. It's not a B2B part of BT, you're with me? We specifically focus on those kind of multi million customers that we've got in those various services. And in particular, my group we do infrastructure. we really do from data center all the way up to really about boot time or so we'll just pass boot time, and the application developers look after that stage and above. >> Okay, great, we definitely going to want to dig in and talk about that, that boundary between the infrastructure teams and the application teams. But let's talk a little bit first, we're talking about VMware. So, how long has your organization been doing VMware and tell us, what you see with the announcement that VMware is making for vSphere 7? >> Sure, well, I mean, we've had really great relationship with VMware for about 12, 13 years, something like that. And it's a absolutely key part of our infrastructure. It's written throughout BT, really, in every part of our operations, design, development, and the whole ethos of the company is based around a lot of VMware products. And so one of the challenges that we've got right now is application architectures are changing quite significantly at the moment, And as you know, in particular with serverless, and with containers and a whole bunch of other things like that. We're very comfortable with our ability to manage VMs and have been for a while. We currently use extensively we use vSphere NSXT, VROPs, login site, network insight and a whole bunch of other VMware constellation applications. And our operations teams know how to use that they know how to optimize, they know how to pass the plan, and (murmurs). So that's great. And that's been like that for half a decade at least, we've been really, really confident with our ability to deal with VMware environments. And along came containers and like, say, multi cloud as well. And what we were struggling with was the inability to have a single pane of glass, really on all of that, and to use the same people and the same processes to manage a different kind of technology. So we, we've been working pretty closely with VMware on a number of different containerization products. For several years now, I've worked really closely with the vSphere integrated containers, guys in particular, and now with the Pacific guys, with really the ideal that when we bring in version seven and the containerization aspects of version seven, we'll be in a position to have that single pane of glass to allow our operations team to really barely differentiate between what's a VM and what's a container. That's really the Holy Grail. So we'll be able to allow our developers to develop, our operations team to deploy and to operate, and our designers to see the same infrastructure, whether that's on-premises, cloud or off-premises, and be able to manage the whole piece in that respect. >> Okay, so Phil, really interesting things you walk through here, you've been using containers in a virtualized environment for a number of years, want to understand and the organizational piece just a little bit, because it sounds great, I manage all the environment, but, containers are a little bit different than VMs. if I think back, from an application standpoint, it was, let's stick it in a VM, I don't need to change it. And once I spin up a VM, often that's going to sit there for, months, if not years, as opposed to, I think about a containerization environment. It's, I really want to pool of resources, I'm going to create and destroy things all the time. So, bring us inside that organizational piece. How much will there needs to be interaction and more interaction or change in policies between your infrastructure team and your app dev team? >> Well, yes, me absolutely right, that's the nature and the timescales that we're talking about between VMs and containers is wildly different. As you say, we probably almost certainly have Vms in place now that were in place in 2018 certainly I imagine, and haven't really been touched. Whereas as you say, VMs and a lot of people talk about spinning them all up all the time. There are parts of architecture that require that, in particular, the very client facing bursty stuff, does require spinning up and spinning down pretty quickly. But some of our some of our other containers do sit around for weeks, if not months, really does depend on the development cycle aspects of that, but the heartbeat that we've really had was just visualizing it. And there are a number of different products out there that allow you to see the behavior of your containers and understand the resource requirements that they are having at any given moment. Allies troubleshoot and seven. But they need any problems, the new things that we we will have to get used to. And also it seems that there's an awful lot of competing products, quite a Venn diagram of in terms of functionality and user abilities to do that. So again coming back to being able to manage through vSphere. And to be able to have a list of VMs on alongside is a list of containers and to be able to use policies to define how they behave in terms of their networking, to be able to essentially put our deployments on rails by using in particular tag based policies, means that we can take the onus of security, we can take the onus of performance management and capacity management away from the developers who don't really have a lot of time, and they can just get on with their job, which is to develop new functionality, and help our customers. So that means then we have to be really responsible about defining those policies, and making sure that they're adhered to. But again, we know how to do that with the VMs through vSphere. So the fact that we can actually apply that straight away, just with slightly different compute unit, is really what we're talking about here is ideal, and then to be able to extend that into multiple clouds as well, because we do use multiple clouds where (murmurs) and as your customers, and we're between them is an opportunity that we can't do anything other than be excited about (murmurs) >> Yeah, Phil, I really like how you described really the changing roles that are happening there in your organization need to understand, right? There's things that developers care about the they want to move fast, they want to be able to build new things and there's things that they shouldn't have to worry about. And, you know, we talked about some of the new world and it's like, oh, can the platform underneath this take care of it? Well, there's some things platforms take care of, there's some things that the software or your team is going to need to understand. So maybe if you could dig in a little bit, some of those, what are the drivers from your application portfolio? What is the business asking of your organization that's driving this change? And being one of those tail winds pushing you towards, Kubernetes and the vSphere 7 technologies? >> Well, it all comes down to the customers, right? Our customers want new functionality. They want new integrations, they want new content, they want better stability and better performance and our ability to extend or contracting capacity as needed as well. So there will be ultimate challenges that we want to give our customers the best possible experience of our products and services. So we have to have address that really from a development perspective, it's our developers have the responsibility to, design and deploy those. So, in infrastructure, we have to act as a firm, foundation, really underneath all of that. That allows them to know that what they spend their time and develop and want to push out to our customers is something that can be trusted is performant. We understand where the capacity requirements are coming from in the short term, and in the long term for that, and he's secure as well, obviously, is a big aspect to it. And so really, we're just providing our developers with the best possible chance of giving our customers what will hopefully make them delighted. >> Great, Phil, you've mentioned a couple of times that you're using public clouds as well as, your VMware firm. Want to make sure I if you can explain a little bit a couple of things. Number one is, when it comes to your team, especially your infrastructure team, how much are they in involved with setting up some of the basic pieces or managing things like performance in the public cloud. And secondly, when you look at your applications, or some of your clouds, some of your applications hybrid going between the data center and the public cloud. And I haven't talked to too many customers that are doing applications that just live in any cloud and move things around. But you know, maybe if you could clarify those pieces as to, what cloud really means to your organization and your applications? >> Sure, well, I mean, tools. Cloud allows us to accelerate development, which is nice because it means we don't have to do on-premises capacity lifts for new pieces of functionality are so we can initially build in the cloud and test in the cloud. But very often, applications really make better sense, especially in the TV environment where people watch TV all the time. I mean, yes, there are peak hours and lighter hours of TV watching. Same goes for broadband really. But we generally were well more than an eight hour application profile. So what that allows us to do then is to have applications that are, well, it makes sense. We run them inside our organization where we have to run them in our organization for, data protection reasons or whatever, then we can do that as well. But where we say, for instance, we have a boxing match on. And we're going to be seeing an enormous spike in the amount of customers that want to sign up into our auto journey to allow them to view that and to gain access to that, well, why would you spend a lot of money on servers just for that level of additional capacity? So we do absolutely have hybrid applications, not sorry, hybrid blocks, we have blocks of sub applications, dozens of them really to support our platform. And what you would see is that if you were to look at our full application structure for one of the platforms, I mentioned, that some of the some of those application blocks have to run inside some can run outside and what we want to be able to do is to allow our operations team to define that, again, by policies to where they run, and to, have a system that allows us to transparently see where they're running, how they're running, and the implications of those decisions so that we can tune those maybe in the future as well. And that way, we best serve our customers. We got to get our customers yeah, what they need. >> All right, great, Phil, final question I have for you, you've been through a few iterations of looking at VMs containers, public cloud, what what advice would you give your peers with the announcement of vSphere 7 and how they can look at things today in 2020 versus what they might have looked at, say a year or two ago? >> Well, I'll be honest, I was a little bit surprised by vSphere 7. We knew that VMware will working on trying to make containers on the same level, both from a management deployment perspective as VMs. I mean, they're called VMware after all right? And we knew that they were looking at that. But I was surprised by just quite how quickly they've managed to almost completely reinvent the application, really. It's, you know, if you look at the whole Tansy stuff and the Mission Control stuff, I think a lot of people were blown away by just quite how happy VMware were to reinvent themselves from an application perspective, and to really leap forward. And this is, between version six and seven. I've been following these since version three, at least. And it's an absolutely revolutionary change in terms of the overall architecture. The aims to, to what they want to achieve with the application. And luckily, the nice thing is, is that if you're used to version six is not that big a deal, it's really not that big a deal to move forward at all, it's not such a big change to process and training and things like that. But my word, there's an awful lot of work underneath that, underneath the covers. And I'm really excited. And I think all the people in my position should really use take it as an opportunity to revisit what they can achieve with, in particular with vSphere, and with in combination with NSXT, it's quite hard to put into place unless you've seen the slides about it and unless you've seen the product, just how revolutionary the version seven is compared to previous versions, which have kind of evolved through a couple of years. So yeah, I think I'm really excited about it. And I know a lot of my peers or the companies that I speak with quite often are very excited about seven as well. So yeah, I'm really excited about though the whole base >> Well, Phil, thank you so much. Absolutely no doubt this is a huge move for VMware, the entire company and their ecosystem rallying around, help move to the next phase of where application developers and infrastructure need to go. Phil Buckley joining us from British Telecom. I'm Stu Miniman. Thank you so much for watching theCube. (upbeat music)