Desktop cloud architecture explanation (VDI, IDV, VOI/TCI, RDS)

Table of contents

Cloud desktop architecture

VDI virtual desktop infrastructure

IDV Intelligent Desktop Virtualization

VOI/TCI

VOI virtual system architecture

TCI transparent computer architecture

RDS Remote Desktop Service

Cloud desktop architectures from different vendors

Desktop Transfer Protocol

What is cloud desktop

Desktop cloud is an application developed after virtualization technology matures. Desktop cloud is also often called cloud desktop, VDI, etc.

The cloud in the desktop cloud generally refers to the enterprise's data center. By installing several virtual machines on the server in the data center, this virtual machine is the desktop; but the terminal cannot directly connect to this virtual machine (cloud desktop), so it is necessary to Through technology, the virtual machine is turned into a desktop cloud and distributed; after being distributed, only the thin client (PC, mobile phone, thin client, etc.) needs to be connected to the cloud desktop server platform in the data center, and finally it can be connected to the desktop for use

Advantages of cloud desktop

The terminal is separated from the data information, the data is processed and stored centrally in the background, and the data is managed in a unified manner

Users can access the cloud desktop through any network, making mobile work more convenient.

All resources are concentrated in the data center, which can flexibly allocate resources and improve resource utilization.

Cloud desktop involves main components

Hardware server: Provides underlying hardware resources (separate storage and computing resources can be used, or hyper-converged architecture HCI can be used as the overall solution architecture)

Cloud computing platform:Use computing, storage and other virtualization technologies to implement resource virtualization and virtual machine installation to generate virtual desktops

Cloud desktop controller:Realize desktop cloud provisioning, management, etc.

Cloud desktop architecture

Common architectures currently include VDI, IDV, VOI/TCI, RDS and other architectures

VDI virtual desktop infrastructure

VDI (Virtual Desktop Infrastructure) virtual desktop infrastructure

VDI is a virtual desktop infrastructure with centralized storage and centralized computing. It is currently the most used form.

Centralize all user desktop data calculations on the server side. The user terminal only receives images and does not participate in any calculations.

Architecture diagram

The server performs calculations, the thin terminal is only responsible for input and output of information (the thin terminal comes with its own operating system), and the display screen displays images.

Cloud desktop implementation process

Run the virtual machine (desktop) on the server, then connect the thin terminal to the cloud desktop management platform, and then enter the username and password on the thin terminal
At this time, the cloud desktop management platform activates the corresponding cloud desktop according to the request of the thin terminal, and delivers it to the thin terminal through the desktop protocol (usually the desktop is bound to the user name entered by the thin terminal)
The thin terminal receives the image information of the desktop and displays it on the monitor (the thin terminal is only responsible for input, output and interface display, and does not participate in any calculations and applications)

NOTE: Peripheral redirection

When inserting peripherals into a thin terminal, you need to enable peripheral redirection and connect the peripherals connected to the thin terminal to the actual virtual machine (storage on the server) through USB redirection.

Advantage

In line with the architecture of modern centralized cloud computing, one server virtualizes several virtual desktops to achieve maximum server utilization; then the scalability of desktop users is achieved through clustering of multiple servers.
Centralized management and control, one administrator can control thousands of cloud desktops, the configuration is simpler and more flexible, and desktop roaming can be achieved
Data security is high. The client of the VDI cloud desktop is only the desktop image receiving end, and all data will be saved on the server; this architecture has many data protection measures (copy technology, etc.)

Disadvantages

The construction cost is high. VDI desktops need to rely on powerful CPUs and consume a lot of memory. Powerful servers must be purchased.
It is highly dependent on the network environment and requires high bandwidth and low latency. Once the network is disconnected from the server, the VDI desktop will be unusable.

IDV Intelligent Desktop Virtualization

IDV（Intelligent Desktop Virtualization）intelligent desktop virtualization

IDV is a cloud desktop architecture with centralized image management and distributed computing; it is a technology proposed by Inter

The server centrally stores the system image, and the terminal obtains the image from the server and installs the virtual machine locally and runs the desktop;

The terminal needs to provide its own computing power, but this method does not require a large amount of image transmission and can support the system running offline.

Architecture diagram

The server stores the image, the fat terminal itself provides computing power to run the desktop (the fat terminal comes with its own operating system), and the monitor is used to display images

Cloud desktop implementation process

Upload the image to the cloud desktop platform on the server, then create a virtual machine based on the image, install some necessary drivers on the virtual machine, then use the virtual machine as a template and convert it into an image, and deliver the image to the terminal

After the fat terminal receives the image through the network, it creates a virtual machine based on the image, and you can see the desktop at this time.

Notice

During the image delivery process, some policy management settings of the server for the terminal or image will be delivered together.

After the cloud terminal obtains the resources issued by the server, it starts the virtual machine for users to use.

Advantage

Each user terminal is a virtual desktop node, and the desktop system can theoretically be expanded wirelessly
The network requirements are not high (only when transferring the system image, the network is needed), and offline support is available.
The IDC desktop experience is equivalent to the physical terminal device experience, close to the local experience effect, and the user experience effect is good
The cost is controllable. The main cost of IDV desktop comes from the cloud desktop terminal. The server side is only for control and management. There is no need to purchase a powerful server, and the cost is greatly reduced.
There is no need to redirect peripherals, because the virtual machine runs directly locally and can be directly plugged into the local terminal (but local resource virtualization is still required. The terminal is equivalent to the server, and the virtual machine is run on it, which involves local virtualization. )
Compared with VOI, IDV adds a virtualization layer to support running operating systems that are not supported by physical hardware on new terminal devices.

Disadvantages

IDV stores virtual desktops and user data on the terminal, and data security is relatively low.
Maintenance is relatively inconvenient. Once a failure occurs, managers need to intervene in the process of restoring desktops and user data; if the terminal is in a cross-Internet environment, terminal maintenance is even more difficult.
To run a virtual machine and participate in calculations, a dedicated high-performance terminal must be used (this type of terminal is generally called a fat terminal)
Compared with VOI, there is no obvious advantage

VOI/TCI

VOI virtual system architecture

VOI (Virtual Opratingsystem Infrastructure) virtual system architecture (PXE diskless boot + caching technology)

Architecturally similar to IDV, it adopts a centralized storage and distributed computing architecture.

However, there is no virtualization layer. Instead, the client system is started in a manner similar to a diskless workstation, allowing the desktop to run completely on the local physical machine. The desktop performance is similar to that of a traditional PC.

Store system data in the shared storage on the server side (like personal data stored in the terminal), and then run the desktop on the terminal. When the terminal starts, the system startup data is obtained from the server side through network redirection technology (it also supports caching the system locally. running), supports offline running

How to start the user's client

After the client machine starts, it obtains the startup data of the operating system from the server through network redirection, and then gradually obtains the required operating system data during the running process.

VOIGive IDV classification

The IDV server only stores the system image, and the rest of the data is stored in the fat terminal.

The VOI server stores system data (images, drivers and other configuration files), and personal data is stored in the terminal

Advantage

Avoids the overhead of the virtualization layer, performance loss, and peripheral compatibility equivalent to a physical PC

2. High peripheral compatibility

Disadvantages

1. Desktop roaming is not supported

2. Unable to allocate resources on demand

3. Data security is not high and data is stored locally.

TCI transparent computer architecture

TCI(Transparernt Computing Infrastructure) Transparent computing infrastructure (image boot + virtual disk driver)

It can be understood as a VOI solution that combines Intel software/hardware technology

TCIJapanese VOI classification

TCI: In the boot phase, the TCI booter based on UEFI is used for booting. In the TCI booter, the user can log in with an account. , image selection and other operations; when the user selects the operating system image, the bootloader exits, and the operating system directly connects to the underlying hardware, directly utilizing the terminal's local CPU, memory, peripherals and other hardware performance, making the operating system OS almost completely run on the On physical hardware

VOI:Compared with TCI technology, VOI implements most functions on UEFI, including image selection and account login Etc., the advantage is that the startup time is basically the same as that of a PC, but it cannot implement more extended functions (such as advanced network authentication, advanced identity authentication, etc.)

RDS Remote Desktop Service

RDS（Remote Desktop Services）Remote Desktop Services

RDS is an upgraded version of the Windows operating system RDP. It is based on a multi-user operating system. First, configure the server according to the number of users, then install the shared cloud desktop management software on the server with the operating system installed, and then create users in batches; through the cloud desktop The transmission protocol is distributed to each client. Each logged-in user can share a set of systems and software, but each user operates independently without affecting each other.

Cloud desktop architectures from different vendors

VDIframeworks merchant

Ruijie, Sangfor (mainly promoting architecture), H3C, Huawei, Cloudwing (mainly promoting architecture), Lenovo, Ohi Cloud, VMware, etc.

RDSframework merchant

H3C, Microsoft, Blue Pigeon

IDVframework merchant

Ruijie (main promotion architecture), Ohyiyun

VOIframework merchant

Lenovo (mainly recommended architecture), Ohyiyun, Blue Pigeon, Cloud Wings

Desktop Transfer Protocol

Desktop transfer protocols from different vendors

Microsoft: RDP (Remote Display Protocol)

Vmware：     PCoIP（PC-over-IP）

Citrix：          ICA（Independent Computing Architecture）/HDX

Reahat：       SPICE（Simple Protocol Independent Computing Environment）

Huawei: HDP (Huawei Desktop Protocol)

Sangfor: SRAP (Sangfor Remote Access Protocol)

Ruijie: EST (Enhanced Stream Transmission)

ICA/HDX

Establish a large channel between the server and the terminal. This channel transmits desktop information and peripheral information between the server and the terminal. There is an independent channel for each peripheral and desktop, and each independent channel can be defined. Independent interaction timing (such as compression algorithm, security settings, etc. are inconsistent for each channel, define your own)

The ICA method occupies a lower bandwidth and can be used normally even when the delay is high.

HDX: As an enhanced version of ICA, it enhances the user experience (including upgrades to video, sound, 3D and other features - HDX supports H.264 video compression algorithm)

PCoIP（PC-over-IP）

PCoIP is developed on top of the existing standard IP network and is based on the UDP protocol

PCoIP compresses and transmits the user's session in the form of images. This method supports high resolution when transmitting the desktop, supports full frame rate video playback and image display, supports multiple devices as well as complete peripheral devices and high-quality audio.

However, the PCoIP protocol does not have the redirection capability for peripherals such as serial and parallel ports. Some manufacturers use additional redirection plug-ins to make up for this shortcoming.

SPICE Simple Protocol for Standalone Computing Environment

SPICE is a high-performance, dynamic, adaptive network communication protocol that can bring an experience close to the local physical desktop to the user terminal.

When using this method, the virtual machine only needs to decode the video. The video compression is completed by the KVM kernel, so it has certain advantages over the video.

RDP-RemoteFX

When the RDP protocol works, the user needs to install the RDP client. The user's peripherals are redirected to the server through the client, and the corresponding plug-in is used on the server for processing.

EAST

Using a block processing scheme, the image is divided into single-color, two-color, and multi-color blocks. Different blocks use different compression algorithms to re-encode the image. After the encoding is completed, it is transmitted to the terminal. At this time, the transmission in the network takes up The bandwidth is very small

and also utilizes video redirection technology

	ICA	PCoIP	RDP	SPICE
Transmission bandwidth requirements	Low	middle	high	middle
Image display experience	middle	high	Low	high
Two-way audio support	high	Low	high	high
Video playback support	middle	Low	middle	high
User peripheral support	high	Low	high	middle
Transport security	high	high	middle	high