EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture Copyright © 2010 EMC Corporation. All rights reserved. Published May, 2010 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. Benchmark results are highly dependent upon workload, specific application requirements, and system design and implementation. Relative system performance will vary as a result of these and other factors. Therefore, this workload should not be used as a substitute for a specific customer application benchmark when critical capacity planning and/or product evaluation decisions are contemplated. All performance data contained in this report was obtained in a rigorously controlled environment. Results obtained in other operating environments may vary significantly. EMC Corporation does not warrant or represent that a user can or will achieve similar performance expressed in transactions per minute. No warranty of system performance or price/performance is expressed or implied in this document. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com. All other trademarks used herein are the property of their respective owners. Part number: H7125 EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture 2 Contents Reference architecture overview ................................................................................................ 4 Document purpose ................................................................................................................. 4 Solution purpose .................................................................................................................... 4 The business challenge .......................................................................................................... 4 The technology solution .......................................................................................................... 5 Key components ........................................................................................................................ 6 Solution architecture ............................................................................................................... 6 Digital video streams .............................................................................................................. 6 Master server ......................................................................................................................... 6 Recorder server ...................................................................................................................... 6 VMware vSphere 4 ................................................................................................................. 7 Fault tolerance ........................................................................................................................ 7 Physical architecture .................................................................................................................. 8 Reference architecture diagram.............................................................................................. 8 Virtualized Nextiva servers ..................................................................................................... 9 Validated environment profile ....................................................................................................10 Profile characteristics ............................................................................................................10 Verint minimum requirements for ESX ...................................................................................11 CLARiiON configuration ........................................................................................................12 Hardware and software resources.............................................................................................13 Hardware ...............................................................................................................................13 Software ................................................................................................................................14 Virtual hardware requirements ...............................................................................................14 Conclusion ................................................................................................................................15 Summary ...............................................................................................................................15 Next steps .............................................................................................................................15 EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture 3 Reference architecture overview Reference architecture overview Document This document provides an architectural overview of the EMC Virtual Infrastructure purpose for Physical Security solution enabled by EMC® CLARiiON®, EMC Celerra®, VMware vSphere 4, and Verint Nextiva. This document also includes configuration guidelines and resource specifications for the solution components and storage arrays. For detailed information regarding installation and implementation, please consult the Proven Solution Guide for the EMC Virtual Infrastructure for Physical Security. Solution The purpose of this solution is to present a reference architecture that provides a purpose platform for integrating legacy and state-of-the-art physical security and surveillance infrastructures, while using virtualization technology to: • Increase resource utilization • Decrease the number of servers and their associated costs • Maximize server manageability Using the EMC and Verint integrated solution, a security team can view realtime video while also receiving policy-based and anomaly-based alerts generated from sophisticated software analysis of the data from remote locations and historical archives. The business Private businesses and public entities have responded to rising concerns about theft, challenge fraud, and terrorism by sharpening their focus on physical security and surveillance systems. These organizations face two key challenges: • Managing and protecting their ever-growing volume of physical security information • Maximizing the performance and utilization of their network and storage infrastructure The ability to access the right data at the right time from anywhere is crucial to supporting physical security and surveillance needs. But comprehensive solutions may be hindered by: • Proprietary software and closed hardware platforms • Lack of archive management capabilities • Data retrieval wait times or lost data • Content authenticity These limitations are amplified by the high expansion costs of legacy video surveillance systems based on CCTV, digital video recorders (DVRs) or networked video recorder (NVR) technologies; and non-integrated IT and physical security systems. EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture 4 Reference architecture overview The technology The EMC Virtual Infrastructure for Physical Security solution provides the ability to solution control video surveillance and analyze security incidents in real time from anywhere, while monitoring and collecting evidence faster through realtime data and active archiving capabilities. This solution integrates EMC and Verint technology in a virtualized architecture to help meet the challenges of video surveillance information convergence and management. Verint Nextiva software aggregates physical security content from multiple sources, integrating IP networking and a full range of physical security systems, including: • Video surveillance cameras • Access control devices and intrusion detection systems • Information security applications • Visitor management and identity recognition • Asset management • Sensors and alarms • RFID, biometrics, plus future enhancements and analytics Verint's Review application is compatible with RSA's SecurID Windows Authentication agent, providing multiple layers of secure access to the physical security infrastructure and authenticated tamper-proof video data for increased conviction rates. The core storage architecture is based on enterprise-class EMC CLARiiON storage systems to cost-effectively scale the solution as security requirements grow with industry-leading reliability, availability, scalability, and storage-based functionality. To reduce the footprint of a Nextiva installation, the servers and recorder can be run on virtual machines using VMware vSphere 4, including the Nextiva master server, Nextiva recorder server, Nextiva ESM server, and the Nextiva master recorder. The virtualized architecture uses VMware vSphere 4 and includes fault-tolerance high-availability (FT/HA) functionality to provide: • Zero downtime • Zero data loss • Continuous availability EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture 5 Key components Key components Solution The physical security components are typically comprised of legacy analog architecture monitoring capabilities, analog cameras, and IP cameras. Nextiva encoders are employed to convert standard NTSC/PAL video from analog cameras to a digital video stream over TCP/IP. Nextiva IP cameras or customer- furnished IP cameras can also be deployed. Each camera is capable of producing a digital video stream over TCP/IP. EMC’s storage platforms are used to provide single- or multi-tiered storage architectures for centralized or decentralized enterprise requirements. To optimize hardware costs, reduce the data center footprint, and reduce greenhouse gas, Nextiva servers may be virtualized, running on virtual machines enabled by VMware vSphere 4. Digital video Digital video streams over TCP/IP are captured by the Nextiva recorder server streams application and written to CLARiiON storage. Note: Only the EMC E-Lab™ Interoperability Navigator SAN and DAS configurations are supported with the Nextiva recorder application. Master server The Nextiva master server application provides an index of the video captured by the Nextiva recorders as well as user authorization and event management. The master and recorder server applications can be installed on a single server depending on configuration requirements. This configuration is considered a master recorder server. Recorder The Nextiva recorder server application captures live video streams to storage server volumes for archiving. The recorder application keeps a separate index for all video captured and acts as the source for video playback and review requests. EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture 6 Key components VMware VMware vSphere 4 is the market-leading virtualization solution that allows you to vSphere 4 turn your infrastructure into an efficient and flexible internal cloud, enabling you to: • decrease your capital and operating costs, • run a greener data center and reduce energy costs, • control your application service levels with advanced availability and security features, and • streamline IT operations and improve flexibility. Fault tolerance VMware vSphere 4.0 with ESX 4.0 provides hardware component failure protection for up to 500 cameras with event-based recording enabled or up to 700 cameras without event-based recording enabled. EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture 7 Physical architecture Physical architecture Reference The following illustration depicts the overall physical architecture of the solution. architecture diagram EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture 8 Physical architecture Virtualized The reference architecture diagram illustrates the virtualization of Nextiva servers Nextiva servers using VMware vSphere 4. The virtualized infrastructure must use server and storage adapter hardware that is officially validated by VMware as well as validated by EMC. VMware FT relies on a single processor for all activity such as operating system functions, a SQL database, and Nextiva software. It can support up to 500 cameras with event-based recording enabled. The normal boundary of 700 cameras is maintained when event-based recording is not enabled. VMware FT provides a full nondisruptive transition where no data is lost during a failover or noticeable by the client. VMware HA is not restricted to any hardware limitation. Therefore it is treated as a real physical server and can follow the Boundaries and Limitation by Nextiva. VMware HA allows more hardware resources used per virtual machine then FT, but is considered to be a disruptive failover where the virtual machine will reboot on the secondary server. Expected time for a full Nextiva recovery depends on the scale of the system and may reach up to 8 minutes. The database of supported hardware, including fault tolerance, for VMware can be found at: http://www.vmware.com/resources/compatibility/search.php EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture 9 Validated environment profile Validated environment profile Profile The solution was validated with the following environment profile. characteristics Profile characteristic Value Nextiva application software Windows Server 2003 SP2/R2 on local server disk or boot from CLARiiON Storage topology SAN, iSCSI, and NAS Number of recorder servers per master recorder 22 – Windows Server 2003 75 – Windows Server 2008 without R2 (Verint tested) Number of cameras per recorder server Varies based on total VMware load and server class of VMware platform 96 @ CIF 30 FPS 48 @ 2 CIF 30 FPS 32 @ 4 CIF 30 FPS Total bandwidth per recorder server 19.5 MB/s Total bandwidth per ESM server 19.5 MB/s Total bandwidth per CUA 31 MB/s EMC Virtual Infrastructure for Physical Security Enabled by EMC CLARiiON, VMware vSphere 4, and Verint Nextiva Reference Architecture 10