Multi-tenancy is a must for cloud delivery. Our Horizon DaaS Platform lets service providers provision a secure environment for tenant entitlements. The tenant receives:
- Dedicated VLAN
- Dedicated Filer
- Dedicated compute (depending on the type of Windows desktop delivered)
- Dedicated access portal
- Dedicated access gateway
Single Management: Multi-Desktop Models
Our solution provides a single platform for provisioning and managing multiple workspaces, including:
- Full VDI desktops (Windows 7, 8, XP or Linux)
- Shared session desktops (RDS)
- Windows Server desktops
- Individual applications
Tiered Role Separation
The Horizon DaaS Platform supports full role separation across the service provider, IT and end user. Desktop management can be handled by the end company or a managed service provider.
Multi-Data Center Management
In addition to scaling within a data center, our technology enables geographic scalability across data centers. This is important for servicing customers with geographically dispersed users and for maintaining business continuity. Should one data center go down, the other data center provides employee access to desktops and hosted apps without interruption.
DaaS Platform Software Components
There are four major components to the Horizon DaaS Platform: Resource Manager, used by service providers to manage the infrastructure; Access Manager and Desktop Manager, with which tenants manage user connections, virtual desktops and hosted apps respectively; and the Service Grid Backbone, the essential element for ensuring conflict-free connections and security between service provider and tenant components.
Service providers manage infrastructure capacity and tenant entitlement from the Resource Manager. This appliance lets you define the desktop options that tenants can purchase, such as Windows 7, Windows Server Workstation, Windows XP or Linux; the quantity of memory and CPU power allocated to each virtual desktop; and whether memory is persistent or dynamic (and also whether the customer is permitted to choose between these options). Capacity is managed—including the ratio of virtual to physical machines—and memory over-allocation determined, all within the Resource Manager.
- You can choose whether to share a host or dedicate compute to the virtual desktop. This unique feature makes it possible to offer Windows 7 virtual desktops while staying in compliance with Microsoft. Only the Horizon DaaS Platform supports both models: host-sharing for Linux desktops or a dedicated host for a cloud-hosted Windows 7 desktop solution.
- Calculate the level of each resource—such as storage and compute—required to meet the tenant’s needs. You’ll see whether you have enough compute power assigned to the tenant and sufficient overall capacity in the service grid to satisfy tenant needs.
- Provision the tenant: perform registration, provide a unique password, upload a custom look and feel, and assign a unique VLAN. The platform will then auto-configure an Access Manager and Desktop Manager specific to the tenant.
This customer front-end lets the tenant manage the connection broker for mapping users to desktops, and provides portal access by which the customer’s users connect to their desktops.
Each customer has its own Desktop Manager to provision pools of desktops and continuously monitor and manage the desktop session state.
Service Grid Backbone
The Service Grid Backbone lies between the Service Provider (i.e., Resource Manager) and tenant (i.e., Desktop Manager and Access Manager) layers. This technology, unique to the Horizon DaaS Platform and critical for service provider success, lets the Resource manager reside in both the service provider network and the Service Grid Backbone. Likewise, the Access and Desktop Managers live in both the tenant network and the Service Grid Backbone. Packets cannot cross the network, but the address space used by service provider and tenant can be identical without issues. This non-routable network design enables both service provider and tenant to run the same subnet IP ranges without conflict.
The Service Grid Backbone also contributes to the DaaS Platform’s comprehensive security. Service providers and tenants cannot bridge into each other’s networks but can still communicate with each other—because the tenant appliances (Access Manager and Desktop Manager) and the service provider appliance (Resource Manager) are dual-homed on the non-routable network.