DevCentral > Weblogs > Lori MacVittie - Two Different Socks

posted on Monday, January 11, 2010 3:21 AM

If you’re just trading “specialized” hardware for “dedicated” hardware you’re losing more than you’re gaining. 

Apparently I have not gotten the memo detailing why specialized hardware is a Very Bad Thing(TM) . I’ve looked for it, I really have, but I cannot find it anywhere. What I did find was any number of random press releases announcing how “virtual version X” of some network or application infrastructure solution was now virtualized and hey, you don’t specialized hardware to run it. These random press releases neglect, I might add, to mention that there's very little difference between the requirement for "specialized hardware" and "dedicated hardware" in terms of cost of ownership, maintenance, and operational costs.

But Lori, you say, incredulous that I am apparently in so much denial I can’t see that the beauty of virtual infrastructure is that there is no longer a need for dedicated hardware.

Hogwash and horsepuckey, I say. Apparently I’m not the one in denial.


RISK, REVENUE, and RELIABILITY

The concept that you can share hardware for infrastructure is certainly a true one but the reality is that most organizations are never going to do it. Ever. Not to pick on Cisco here, but did you ever wonder why it was that AON didn’t ever pan out? It was an awesome concept, in my opinion, and one that’s been more successful implemented on other Cisco platforms, like AXP (Application Extension Platform), because no router jockey, and thus by extension no organization, was going to potentially compromise their core routing image infrastructure by allowing other code and functionality to co-exist with it. At least none that hoped to keep their jobs, anyway. That the concept has panned out better on other platforms is no surprise because those platforms are less critical to business continuity and revenue generating business processes.  Juniper’s recent re-launch of “the network”, too, points to an increasing interest – at least from the vendor world – for more open, programmable network infrastructure. Whether Juniper will be more successful on its core routing platforms than Cisco remains to be seen, but I’m betting they’ll see the pattern of behavior that Cisco has, which is to say: no developed code on critical network infrastructure.

And it isn’t just third-party developed applications that give organizations and network teams pause. A unified application delivery platform is highly “pluggable” and can be provisioned to execute a variety of application delivery functions (acceleration, security, optimization, etc…) and yet there are a large number of organizations who stand fast and prefer to provision only critical, core functionality such as load balancing on such platforms as a means to ensure application availability. They don’t want anything to potentially interfere with that process. Period.

Some pieces of infrastructure – particularly those that are part of the network – are so critical (and so very underappreciated) – that they simply cannot be exposed to the kind of risk that comes from “sharing” resources in any model. If revenue is generated on-through-over or continuity requires the availability of network component X then the availability and reliability of X cannot be compromised in the name of following the latest hype/trend/etc.. or saving a few bucks a year.

That means, ultimately, that most virtualized infrastructure – if it ever exists – would simply end up replacing “specialized” with “dedicated” and incur approximately the same costs for power, space, and cooling as the physical version. Management costs remain the same, after all, because it’s not like moving from physical to virtual changes the product or its management interfaces. Virtual versions of infrastructure aren’t any more automatable than their physical counterparts, and they’re likely managed from the same, dedicated management systems that have always managed them.

This belief that critical network functions are suddenly going to become virtualized and co-exist with other pieces of infrastructure or applications, heaven forbid, is misguided. It ignores the fact that if not for the stability and reliability of all that “specialized” hardware that we wouldn’t be able to focus on building out virtual application infrastructures in the first place. That without the stability and reliability of tried and true, proven hardware solutions “cloud” in any shape or form wouldn’t be a possibility because we couldn’t trust the network enough to deploy critical business applications anywhere but on our own desktops.


TWO STEPS FORWARD, THREE STEPS BACK

Proponents of dropping specialized hardware like compression and SSL acceleration hardware point to the constant increase in raw processing power of general purpose CPUs and use it as a reason why the specialized hardware is no longer necessary. What they neglect to mention is that the same improvements in processing power also benefit the specialized hardware, making its increase in performance and raw compute power rise along with that of than general purpose compute power. Those improvements and subsequent performance benefits to applications are lost when moving from specialized (purpose-built) to dedicated/shared (general purpose) compute platforms.

There are real benefits and reasons for infrastructure vendors to provide virtual versions of their solutions: testing, developer integration, solution creation, secondary data centers, first hit’s free marketing, etc… For non-critical infrastructure, i.e. the business could continue to run and generate revenue if it was not available, virtual solutions and shared hardware are indeed a good way to decrease costs, shrink the data center footprint, and scale out on a moment’s notice. But for critical network and application network infrastructure - the components in the network that are so tightly coupled to the business’ ability to execute on a daily basis and generate revenue - it just seems foolhardy to share hardware or otherwise risk compromising the availability and reliability of those core functions. If the outages of Amazon and Google over the past year have taught us anything it’s that reliability is as important if not more so to the organization as decreasing costs.

That ultimately means you’d simply replace “specialized” with “dedicated” and in the process lose whatever performance or functional benefits are associated with the “specialized” hardware. That tradeoff may not be nearly as beneficial to the organization – or its users and customers – as is put forward by marketing hype around virtualized infrastructure solutions.

Follow me on Twitter    View Lori's profile on SlideShare  friendfeed icon_facebook

AddThis Feed Button Bookmark and Share

Related blogs & articles:


Feedback

1/11/2010 5:08 AM
Gravatar Nobody (that I know) would ever suggest that you get rid of _all_ specialized hardware and replace it with virtual, or that everything should be shared.

The best ground is the middle ground where IT is managing the best blend of technology that suits their culture and business. For some that means they can run virtual firewalls and other networking kit, for others they need big dedicated hardware to do single jobs. Horses for courses.

I'm sure you wrote this post, Lori, to get a rise out of folks and that you are not anti-virtualization (though it's easy to think you are after reading this post) - but if you are anti-virtualization then you're just as biased and wrong as the "everything virtual" junkies :-/

Let IT make the best informed decision with open eyes including your view point, the virtual crowd's viewpoint, and end up somewhere in between :-)

Steve
Steve Chambers
1/11/2010 5:25 AM
Gravatar @Steve,

Nope. Not anti-virtualization at all. Just railing against marketing hype that portrays hardware as "evil" and ignores that virtual infrastructure has risks and disadvantages just like it has benefits and advantages, and vice versa.

You said it best: the best ground is the middle ground and based on culture/business needs. Ultimately IT has to make the decision based on their environment and requirements and it may be hardware, it may be virtualized, it may be something in between we haven't considered yet. Maybe it's virtualized infrastructure on specialized hardware?

Lori
macvittie
1/11/2010 8:12 AM
Gravatar Great post Lori!

-Joe
Joe Pruitt
1/11/2010 10:51 AM
Gravatar Per wish a disclosure: I work for Zeus Technology (Not that people reading this didn't know that fact before.)

Here is something to think about. If virtual infrastructure is OK for mission critical applications wouldn't that imply virtual infrastructure is OK for mission critical network services?

What ADC vendors offer is in fact extension of the application architecture as a whole. In most cases ADCs at the end are becoming part of the application architecture itself and itself indistinguishable in virtue of need from say .NET or J2EE application framework.

Were Amazon and Google outages result of specialized hardware?
Izzy
1/11/2010 11:00 AM
Gravatar @Izzy

I'm not sure everyone would agree that virtual infrastructure is okay for mission critical applications either, but assuming it is, that doesn't logically extend to virtual network infrastructure.

Agreed, ADCs are becoming part of the application architecture. Not sure what point you're trying to make with that - they're also part of the network architecture in many cases.

No, Amazon and Google weren't the result of specialized hardware failures. In fact, Google makes a point of (and is very proud of) the use of its own homegrown infrastructure. The inclusion of the outages is that they raise the issue of reliability and availability. Nothing more, nothing less.
macvittie
1/11/2010 4:22 PM
Gravatar It doesn't make a difference if everyone agrees or not. In fact I would say with pretty good certainty that people disagree on that topic. However the main point of it is that if one finds out virtual infrastructure is okay for their mission critical applications and see benefits to it and if they see ADCs as integral part of their application delivery stack then it is natural extension to think about virtual ADCs.

That does not go just for virtual ADCs. If you run your apps in the cloud, why not use ADCs that run native in the cloud.

And third point (after virtual and cloud) there is also software option (that one can put on generic hardware). I was at the customer end of November helping them switch from $20k specialized hardware (cost of single unit) that was at 98% utilization to a Dell R610 (cost of $1200 or so) running ADC software at around 4% utilization (with max compression, SSL offloading etc...). Single specialized hardware box to allow them such performance growth would cost them at least $80k. Guess how much is the upgrade going to cost them in say 3 years when they need to replace their R610 to get double performance out of it? Couple of thousand dollars or so per box. Care to guess how much specialized hardware would cost them 3 years from now to double performance? Anyone wants to do comparison on a 6 year cycle?
Izzy
1/12/2010 10:25 AM
Gravatar Lori,

Randy Arthur, the Chief Technical Officer at CSC Trusted Cloud Services, posted an interesting response to this blog post. Have you checked it out?

www.trustedcloudservices.com/will-it-cultural-b...
Haynes Mansfield
1/12/2010 4:01 PM
Gravatar @Haynes

I did not see that he posted a response. I know he had some very interesting commentary that we've been trying to get posted as a comment - having some technical issues with that. So thank you for posting a link to his response - great stuff!

Thanks,
Lori
macvittie
2/3/2010 4:10 AM
Gravatar WILS: SSL TPS versus HTTP TPS over SSL
Lori MacVittie

Let Me Know What You Think


Please use the form below if you have any comments, questions, or suggestions.

Title:
 
Name:
 
Email: (so we can show your gravatar)
Website:
Comment: Allowed tags: blockquote, a, strong, em, p, u, strike, super, sub, code
 
Please add 7 and 8 and type the answer here:
Blog Stats
Posts:734
Comments:1401
Stories:0
Trackbacks:392
Application Delivery
Cloud Computing
Random

Chat Catcher