Search

[ES] Hoy en día es innegable que la implementación de sistemas directamente sobre servidores físicos ha pasado a un plano meramente residual. Especialmente en la última década, con el encumbramiento del Cloud Computing y la virtualización y la incipiente tendencia hacia la adopción de tecnologías de virtualización, ya no únicamente en servidores, sino también en puestos de trabajo finales, la tecnología VDI (Virtual Desktop Infraestructure) está llevando a muchas organizaciones a transformar la naturaleza clásica de un puesto de trabajo telemático, donde fusionar y coordinar elementos como alta disponibilidad 24/365, actividad desde cualquier lugar, gestión centralizada, optimización de recursos y minimización de costes energéticos, políticas BYOD, mantenimiento uniforme y centralizado, así como una securización integral, centralizada y reglada de nuestro sistema son posibles, gracias a las facilidades aportadas por una infraestructura VDI. Uno de los objetivos del presente estudio es probar y evaluar, en el ámbito de una organización heterogénea respecto a las diferentes tecnologías utilizadas, como pueda ser una universidad pública, en escenarios propiamente didácticos o directamente relacionados con la gestión, una serie de plataformas de virtualización, de diferente naturaleza, y encontrar un elemento común de gestión centralizada. En primer lugar, implementaremos, sin llegar a profundizar, pues no es objetivo de este estudio, una serie de escenarios con diferentes plataformas de virtualización, como VMware Sphere, junto a otras Open Source basadas en KVM/Qemu, como libvirt, oVirt y ProxMox. Utilizaremos UDS Enterprise, herramienta Open Source, como broker o agente de conexión, centralizando autenticadores, protocolos de conexión, administración de recursos asignados, gestionando el despliegue de escritorios virtuales, programando y automatizando de forma óptima el ciclo de vida y utilización de estos, evaluando el rendimiento de nuestro sistema. Evaluaremos el rendimiento y consumo de recursos de nuestra infraestructura, con el objetivo de planificar, programar y optimizar la asignación de recursos y servicios. Finalmente, revisaremos requisitos mínimos y recomendaciones de seguridad expuestos en las guías CCN-STIC para entornos VDI, contrastando estos con las facilidades de seguridad incluídas en los diferentes elementos de la infraestructura de escritorio virtual implementada., [EN] Today it is undeniable that the implementation of systems directly on physical servers has gone to a merely residual level. Especially in the last decade, with the rise of Cloud Computing and virtualization and the incipient trend towards the adoption of virtualization technologies, not only in servers, but also in final workstations, VDI (Virtual Desktop Infrastructure) technology is leading many organizations to transform the classic nature of a telematic workplace, where they merge and coordinate elements such as 24/365 high availability, activity from anywhere, centralized management, optimization of resources and minimization of energy costs, BYOD policies, uniform maintenance and centralized, as well as an integral, centralized and regulated security of our system are possible, thanks to the facilities provided by a VDI infrastructure. One of the objectives of this study is to test and evaluate, in the context of a heterogeneous organization with respect to the different technologies used, such as a public university, in strictly didactic scenarios or directly related to management, a series of virtualization platforms. , of different nature, and find a common element of centralized management. First of all, we will implement, without going into depth, since it is not the objective of this study, a series of scenarios with different virtualization platforms, such as VMware Sphere, together with other Open Source based on KVM/Qemu, such as libvirt, oVirt and ProxMox. We will use UDS Enterprise, an Open Source tool, as a broker or connection agent, centralizing authenticators, connection protocols, administration of assigned resources, managing the deployment of virtual desktops, optimally programming and automating the life cycle and use of these, evaluating the performance of our system. We will evaluate the performance and consumption of resources of our infrastructure, in order to plan, schedule and optimize the allocation of resources and services. Finally, we will review the minimum requirements and security recommendations set out in the CCN-STIC guides for VDI environments, contrasting these with the security facilities included in the different elements of the implemented virtual desktop infrastructure.

Con la evolucion tecnologica constante, es natural que las instituciones se enfrenten a cambios drasticos de paradigmas con respecto a la forma en que funcionan, se administran y se entregan los servicios en las infraestructuras tecnologicas modernas; esto tiene gran impacto en las organizaciones privadas y publicas, en areas administrativas y operativas, que deben lograr gestionar de manera eficiente los recursos de acuerdo con los requerimientos de usuario. En el presente articulo se describen el analisis, diseno, implementacion y pruebas realizados en los laboratorios de computo de la Universidad Distrital Francisco Jose de Caldas (Bogota, Colombia) de dos prototipos de escritorios virtuales como servicio (DaaS) para estudiantes y docentes, basados en los requerimientos principales de algunas asignaturas concernientes al proyecto curricular de Ingenieria de Sistemas, a traves de las tecnologias VDI-in-a-box de Citrix Systems y Oracle Virtual Machine. Con ello se establece una evaluacion para determinar el mejor prototipo por implementar en las salas de computo basado en criterios como el modo de administracion, las caracteristicas que debe cumplir la infraestructura de virtualizacion (VDI), el tipo de persistencia, entre otros puntos. De esta forma, se determina que VDI-in-a-box de Citrix Systems posee caracteristicas que se adaptan mejor que Oracle Virtual Machine de acuerdo con las necesidades del aula educativa. Palabras claves: Escritorios como servicio (DaaS), esquemas centralizados, infraestructura de escritorio virtual (VDI), reutilizacion, simplificacion de administracion. Abstract With evolution technology constant, it is natural that institutions are facing drastic changes of paradigms with regard to the way in which operate, are managed and delivered services in the modern technological infrastructure; having great impact on private and public administrative and operational organizations who must be accomplished efficiently manage resources according to user requirements. This article describes the analysis, design, implementation and testing in the computation laboratories of the Universidad Distrital Francisco Jose de Caldas (Bogota, Colombia) of two prototypes of virtual desktops as a service (DaaS) for students and teachers, based on the requirements of some subjects of the curricular project of systems engineering, through the technologies Citrix VDI-in-a-box Systems and Oracle Virtual Machine. Based on this, an assessment is established to determine the best prototype to be implemented in the computer rooms based on criteria like mode of administration, characteristics that must comply with the infrastructure of virtualization (VDI), the type of persistence, among other issues. In this way, it is determined that VDI-in-a-box of Citrix System shas characteristics that adapt better than Oracle Virtual Machine according to the needs of the educational classroom. Key words: Centralized schemes, desktop as a service (DaaS), re-use, simplification of administration, virtual desktop infrastructure (VDI).

The purpose of this study was to investigate the feasibility of using personal mobile devices for Naval e-Learning (NeL). Another objective was to find out which mobile device and which method of authentication offers the most practical and secure form of essentially bring your own device (BYOD). The use of personal mobile devices to access NeL is a form of BYOD. Finally, Virtual Desktop Infrastructure (VDI) was examined in this study as another secured means to access NeL from BYOD. This study tested the various mobile devices that were Department of Defense (DOD) approved for network use. The study also tested the Common Access Card (CAC) readers that are approved by DOD for CAC authentication against the approved mobile devices. Then the mobile devices and CAC readers’ functionality were tested in a VDI environment to examine the various layers of security that could be implemented when using BYOD on DOD networks to maintain the necessary level of information protection. The results of this study show the iOS devices were capable of accessing NeL training site via the approved CAC readers. However, the iOS devices could only access and enroll, they were unable to launch training due to Flash not being supported by the native browser, the language used to develop NeL training. The results also revealed attempts to use the iOS device and CAC in a VDI to be unsuccessful as a work around to the Flash issue with the iOS browser. The principal conclusion is that through the use of multi-layer security BYOD could be used to access NeL— making it truly available “whenever and wherever.” There is also a need to look into ways authentication can be done without the use of hardware readers. Finally, there is also the need to develop training to support multiple browsers. http://archive.org/details/securityconcerns1094545726 Major, United States Marine Corps Approved for public release; distribution is unlimited.