Insight Vmware Tanzu RabbitMQ

Service scope

Service constraints: VMware Tanzu RabbitMQ runs on Kubernetes or in virtual machines runningLinux or Windows operating systems. It runs on all major Kubernetesdistributions (such as Tanzu Kubernetes Grid, Openshift, GKE, AKS, EKS etc)and on major public & private cloud providers, including, but not limited to,Amazon AWS, Google Cloud, Microsoft Azure and VMware basedinfrastructure.
System requirements: For Kubernetes Installation - compatible Kubernetes runtime (see releasenotes)

For OCI installation - OCI compatible container runtime

For OS Package Installation - currently supported Erlang runtime

For multi-site clusters - < 10ms latency between sites

User support

Email or online ticketing support: Email or online ticketing
Support response times: Support is available. This is available 24 hours a day, 7 days a week, 365 days ayear. Target Response Times Critical (Severity 1) 30 minutes or less (24 hours/7days a week) Major (Severity 2) 2 business hours Minor (Severity 3) 8 businesshours Cosmetic (Severity 4) 1 business day Business Hours - 7am to 7pm,Monday to Friday.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Premium Support Services are available for all VMware Tanzu customers asfollows: Global, 24x7 support for Severity 1 issues, Fast response times forcritical issues, Unlimited number of support tickets, Remote Support and Onlineaccess to documentation, technical resources, knowledge base, and discussionforums. Product updates and upgrades during the subscription period The cost isincluded in the Annual subscription for our software. VMware can also provide, atextra cost, a designated Technical Account Manager (TAM) that can serve as asingle point of escalation for VMware Tanzu Software support and can personallyoversee your support experience. They are experts in advising on the bestoperational condition of platforms, making proactive recommendations andproviding technical guidance. They will work with you to gain a deeperunderstanding of your environments, apps & challenges, and engage subject-matter experts when needed, driving toward more efficient resolution (includingRoot Cause Analysis) and enabling discussion of future plans, projects, orenhancements.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: VMware Data Platform Services are designed to accelerate your successwith VMware Tanzu RabbitMQ by pairing our experts with your people toplan, implement, customize, use, and scale the platform to meet yourneeds. By working together we improve project outcomes and maximizeon-the-job skills enablement. An expert team from VMware PlatformServices will work with designated people from your organization on aprioritized backlog over a period of 4 or 6 weeks. Typically the VMWareData Platform service is focused on deployment and testing concerns.Actual work is tailored against your objectives and actively prioritized byyour Product Owner to ensure investments align to what’s most important.
Service documentation: Yes
Documentation formats: HTML

PDF
End-of-contract data extraction: VMware Tanzu RabbitMQ provides exports of schema through thecommand line client. For message queuing schemas, it is expected thatqueues will be drained as systems are decomissioned and there will be nodata to export. For streaming schemas, export and, possibly, live load intotarget systems can be executed with client applications.
End-of-contract process: In the event of expiration of a Subscription License or any termination ofthe Agreement, Customer must remove and destroy all copies of Software,including all backup copies, from the server, virtual machine, and allcomputers and terminals on which Software (including copies) is installedor used and confirm the destruction of the Software. All support servicescease. If the customer has created applications and services they are freeto move or migrate these applications to other instances of VMware Tanzuor other platforms. The costs associated with doing this are borne by theuser. VMware Tanzu Labs can provide consulting services to assist in thisprocess. The costs associated with are dependent on the number, densityand complexity of the applications.

Using the service

Web browser interface: Yes
Using the web interface: The RabbitMQ management plugin provides an HTTP-based API for managementand monitoring of RabbitMQ nodes and clusters. The management UI isimplemented as a single page application which relies on the HTTP API. Themanagement UI provides:
- Declare, list and delete exchanges, queues, bindings,users, virtual hosts and user permissions.
- Monitor queue length, message rates(globally and per queue, exchange or channel), resource usage of queue, nodeGC activity, data rates of client connections, and more.
- Monitor node resourceuse: sockets and file descriptors, memory usage breakdown, available disk spaceand bandwidth usage on inter-node communication links.
- Manage users(provided administrative permissions of the current user).
- Manage policies andruntime parameters (provided sufficient permissions of the current user).
-Export schema (vhosts, users, permissions, queues, exchanges, bindings,parameters, policies) and import it on node start. This can be used for recoverypurposes or setup automation of new nodes and clusters.
- Force close clientconnections, purge queues.
- Send and receive messages (useful in developmentenvironments and for troubleshooting).
Web interface accessibility standard: None or don’t know
How the web interface is accessible: The web interface is accessible through a browser. We support all major browsertypes. The end user is able to access some but not all of the accessibilityfeatures. Currently, users can use the High contrast visibility features withinthese browsers. Testing is underway for WCAG 2.0 and Section 508 VoluntaryProduct Accessibility Template (VPAT) documentation. Following this process,additional items in WCAG 2.1 will be covered.
Web interface accessibility testing: We have been undertaking a significant amount of testing with assistivetechnology users. Results of the testing are included in the WCAG 2.0/VPATdocumentation currently in process
API: Yes
What users can and can't do using the API: Declare, list and delete exchanges, queues, bindings, users, virtual hosts anduser permissions.
Monitor queue length, message rates (globally and per queue,exchange or channel), resource usage of queue, node GC activity, data rates ofclient connections, and more.
Monitor node resource use: sockets and filedescriptors, memory usage breakdown, available disk space and bandwidthusage on inter-node communication links.
Manage users (provided administrativepermissions of the current user).
Manage policies and runtime parameters(provided sufficient permissions of the current user).
Export schema (vhosts,users, permissions, queues, exchanges, bindings, parameters, policies) andimport it on node start. This can be used for recovery purposes or setupautomation of new nodes and clusters.
Force close client connections, purgequeues.
Send and receive messages (useful in development environments andfor troubleshooting).
API automation tools: Ansible

Chef

SaltStack

Terraform

Puppet
API documentation: Yes
API documentation formats: HTML

PDF
Command line interface: Yes
Command line interface compatibility: Linux or Unix

Windows

MacOS

Other
Using the command line interface: RabbitMQ ships with multiple command line tools, each with a set of relatedcommands:
- rabbitmqctl for service management and general operator tasks
-rabbitmq-diagnostics for diagnostics and health checking
- rabbitmq-plugins forplugin management
- rabbitmq-queues for maintenance tasks on queues, inparticular quorum queues
- rabbitmq-upgrade for maintenance tasks related toupgrades

Scaling

Scaling available: No
Independence of resources: VMware Tanzu RabbitMQ relies on the Kubernetes or IaaSinfrastructure to ensure the correct independence of resourcesfor each environment's requirement and cost toleran
Usage notifications: No

Analytics

Infrastructure or application metrics: Yes
Metrics types: CPU

Disk

Memory

Network

Other
Other metrics: Connection counts (publisher andconsumer)

Counts of schema objects (exchanges,queues, streams, users)

Message rates (publication and delivery)

Message delivery latency
Reporting types: API access

Real-time dashboards

Regular reports

Reports on request

Resellers

Supplier type: Reseller (no extras)
Organisation whose services are being resold: VMware

Staff security

Staff security clearance: Other security clearance
Government security clearance: Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least every 6 months
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding

Other
Other data at rest protection approach: The method used will depend upon the underlying Infrastructureas a Service (IaaS) used. Many customers will use vSphere intheir own infrastructure, in which case the controls are customerdefined.
Data sanitisation process: Yes
Data sanitisation type: Deleted data can’t be directly accessed
Equipment disposal approach: A third-party destruction service

Backup and recovery

Backup and recovery: Yes
What’s backed up: Broker Schema

DMessages in-flight
Backup controls: Schema for a broker cluster is backed up through anexport. Messages in queues and in streams can bebacked up per vhost.
Datacentre setup: Multiple datacentres with disaster recovery

Multiple datacentres

Single datacentre with multiple copies

Single datacentre
Scheduling backups: Users schedule backups through a web interface
Backup recovery: Users contact the support team

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

TLS (version 1.2 or above)

IPsec or TLS VPN gateway
Data protection within supplier network: IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: The level of availability on VMware Tanzu RabbitMQ depends upon theinfrastructure it is deployed upon. Amazon AWS, for example, has aparticular SLA it guarantees and so the RabbitMQ platform could not beguaranteed to be any further available than that. VMware Tanzu PlatformServices provide a platform DoJo whereby our labs team pairs with acustomers platform management team to install and configure theplatform on their infrastructure to meet any SLAs they may have. RabbitMQis configurable in a variety of ways to meet scalability and availabilityrequirements as necessary.
Approach to resilience: VMware Tanzu RabbitMQ's Quorum Queues feature provides the best levelof resilience within a cluster for those applications which require it. QuorumQueues are replicated to multiple nodes in the cluster and messages arepersisted to disk.
For public cloud deployments where clusters aredeployed across multiple Availability Zones, VMware Tanzu RabbitMQoffers intra-cluster traffic compression to manage the cost of cross-AZtraffic.
For multi-site resilience, VMware Tanzu RabbitMQ offers warmstandby management tooling to enable failover to a second site (or publiccloud region) in the event of a disaster.
Outage reporting: We do not provide any outage reporting. We are reliant upon theinfrastructure providers reporting mechanisms if sufficient underlyingcomponents supporting the cluster fail.

Identity and authentication

User authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Identity federation with existing provider (for example Google apps)

Username or password

Other
Other user authentication: The exact network interconnects available will depend upon thecustomer's own preferred infrastructure as a service (IaaS), be theyAWS, GCP, Microsoft Azure, or their own private infrastructure usingVMware vSphere
Access restrictions in management interfaces and support channels: VMware Tanzu restricts access to named user accounts working onbehalf of customers or ourselves. Separate administration roles areavailable for different administration tasks. Tanzu offers the flexibilityto create customized roles and permissions to meet business needs
Access restriction testing frequency: At least every 6 months
Management access authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Identity federation with existing provider (for example Google Apps)

Username or password
Devices users manage the service through: Dedicated device on a government network (for example PSN)

Dedicated device over multiple services or networks

Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: At least 12 months
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: At least 12 months
How long system logs are stored for: User-defined

Standards and certifications

ISO/IEC 27001 certification: No
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: No

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: Other
Other security governance standards: A mapping of NCSC cloud security guidance and CISbenchmarks onto Tanzu features and a reference architecturefor Official and Secret is available. A NIST 800.53r4 controlsmapping is available. We are Cyber Essential plus certified anda number of our Tanzu solutions are ISO 27001 certified
Information security policies and processes: VMware Tanzu Information Security Policies are based onISO/IEC 27001:2013. The policies have been published on thecompany’s internal portal and are reviewed periodically andapproved by the Chief Security Officer. All users are providedwith appropriate security awareness training to ensure policiesare followed. The Information Security Team is led by the ChiefSecurity Officer. The security organization is comprised of 3distinct yet collaborative teams - (1) Governance, Risk andCompliance (2) Information Security and (3) Physical Security.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Every VMware Tanzu software upgrade is pre-tested against our ownsecurity pipeline and alongside other components in the platform before itis shipped to customers via the VMware Tanzu Network. We performadditional vulnerability scanning of our software and dependencies usingthird party scanning software. Every code change to a component is linkedto a requirement and has tests written for it before it is accepted into thenext release. This provides tracking of every change back to the specificuser need that it was required for, alongside the output of the tests.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: Regular testing is done against all our software. In addition, when a CVE isdisclosed in the third party component or dependency, we take the latestfix and test it and ship it as soon as possible after the upstream projectreleases a fix. We also routinely harden software components to minimisethe attack surface.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: All service and application component logs are aggregated in to a logstream allowing centralised analysis of all activity within an installation(Called a Foundation). There are also components to spot when anunauthorised process modified any binaries of built containers, or worksaround the immutable nature of a running container. How quickly aresponse occurs depends on the customer's own incident managementprocesses and policies.
Incident management type: Supplier-defined controls
Incident management approach: How quickly a response occurs depends on the customer's own incidentmanagement processes and policies. Should a problem be discovered inthe Tanzu platform, our support staff will respond within the SLA agreedtimings.

Secure development

Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart: No

Energy efficiency

Energy-efficient datacentres: No

Fighting climate change: Fighting climate change

• Sustainable growth for VMware’s business requires decoupling our companygrowth from carbon emissions. To this end, we’ve accelerated our focus ondecarbonization and received third-party validation from the Science BasedTarget Initiative (SBTi) on our science-based targets. Since 2018, we havemaintained our certified CarbonNeutral® company status, in accordance withThe CarbonNeutral Protocol. Since 2019, we have sourced 100 percent of ourpower in our global facilities from renewable sources, in accordance with RE100Reporting Guidance.
• VMware’s net zero emissions goal builds on approvedscience-based targets and expands the scope of our climate commitments. Forus, a net zero goal means reducing emissions for our entire carbon footprint. Weare focused on prioritizing energy efficiency within our operations through ourcommitment to green buildings, working with our suppliers to reduce theiremissions, and supporting distributed workforces through our Future of Workinitiative. Through carbon financing, we support low carbon sustainabledevelopment projects that enable carbon avoidance to offset our remainingemissions. In line with the leading net zero guidance, we are developing ourstrategy to include carbon removal projects to address residual emissions.
• InFY22, we furthered climate transition planning at VMware, guided by Taskforceon Climate-related Financial Disclosures (TCFD) recommendations. As VMwarecontinues to learn more about climate risks, we can build longer time horizonrisks into our strategy to become even more sustainable and resilient.
Covid-19 recovery: Covid-19 recovery

• Decisive action by VMware during the early days of the COVID-19 pandemicled to a company-wide remote workforce, which our customers were able toimplement as well through VMware’s Workspace solutions. • Through VMware’sunique Citizen Philanthropy approach to giving, we empower every VMwareemployee—wherever they are—to be active, engaged citizens, contributing towhat matters most to them in their own communities. Throughout thepandemic, VMware people delivered food to neighbors in need, made masksand donated resources to frontline workers and relief efforts, and helpednonprofit organizations strengthen their IT operations so they can focus onsupporting their communities. VMware also supported GlobalGiving’sCoronavirus Relief Fund and TechSoup’s COVID-19 Response Fund, and raisedthe limit on matching gifts available to all VMware people.
Tackling economic inequality: Tackling economic inequality

• VMware IT Academy partners directly with more than 2,500 educationalinstitutions, governments and nonprofits globally to empower learners throughcoursework, labs and experiences. To enrich learning and help jump-startcareers, our partner academic institutions can also access the latest suite ofVMware software solutions and use them in a hands-on educationalenvironment. VMware IT Academy is key to our 2030 goal of upskilling 15million people through our educational offerings and creates a pipeline ofdiverse talent that is available to advance companies’ digital journeys anddeploy VMware solutions.
• VMware donates our technology to academicinstitutions, enabling learners with access to technical training and labs acrosstechnology solutions and companies through Academic Cloud.
• VMware ITAcademy partners with the Rochester Institute of Technology (RIT) for theirCybersecurity Bootcamp, an immersive, 15-week hands-on training course toreskill or upskill unemployed individuals, including minorities and veterans.
•VMinclusion Taara offers free technical education on VMware products &technology that enable digital business transformation, addressing the gendergap in the Indian IT sector and empowering women with financial and socialindependence.
• VMware Responsible Sourcing supports sustainability,diversity and accessibility across our supply chain. VMware has committed toworking with 75% of our suppliers (by spend) to set their own science-basedtargets by the end of 2024. We are also prioritizing the sourcing of goods andservices through diverse businesses and have committed to spending $1.5Bwith diverse suppliers through 2030. Our definition of diverse supplier includes:small-business enterprises, minority-owned enterprises, woman-ownedenterprises, and businesses owned by other underrepresented groups such asLGBTQ, veterans, and proprietors with disabilities.
Equal opportunity: Equal opportunity

• VMware joined the Valuable 500, a global business collective that is ignitingsystemic change and unlocking the business, social and economic value ofmore than 1 billion people with disabilities around the world. From ensuring thetechnology we develop is accessible for all to empowering our employeesthrough accessible, inclusive and innovative engagement and wellbeingprograms, our company remains committed to driving meaningful impact ondisability, wellness and neurodiversity inclusion.
• As a leading softwarecompany, user accessibility is top of mind at VMware. One of our ESG goals by2030 is to ensure the technology that we develop, and source within our supplychain, is accessible for all. We created internal Accessibility Guidelines withinVMware and committed to assess all new software and events suppliers foraccessibility standards aligned with our own guidelines.
• Employee ResourceGroups at VMware are called Power of Difference communities (“PODs”), andthey play a strategic role in building a culture of belonging. We are focused ondriving a culture that is inclusive of all forms of diversity, including supportingemployees with disabilities. In 2021, VMware was named a Best Place to Workfor Disability Inclusion by the Disability Equality Index (DEI).
• Making VMwaremore diverse, equitable and inclusive for our employees, customers andcommunities is fundamental to who we are. That’s why measuring and achievingequitable change is key to our 2030 Agenda. We have assigned compensationperformance goals around drivers that improve representation, including hiringand retention of women globally and underrepresented minorities in the UnitedStates, inclusive culture scores and diverse candidate slates. For interviews atevery level, our goal is to have all candidate interview slates include at least onewoman and one underrepresented minority (US only) candidate.
Wellbeing: Wellbeing

• At VMware, we enrich lives at work, at home and in the community, becausewe believe that empowering our people to bring their authentic selves to workdrives business excellence and enables us to achieve our business goals. Weprioritize employee wellbeing and work hard to foster a culture that is ethicaland respectful, kind and compassionate, which is defined by our EPIC2 values—Execution, Passion, Integrity, Customers and Community.
• Employeewellbeing at VMware is a top priority as we believe people are the key to oursuccess, and we are always striving to make it easier for employees to pursuewellbeing on their own terms, which will also help them perform well at work.We recognize that VMware has a responsibility to help support our employeesmanage the added complexities of their work and family situations since thestart of the COVID-19 pandemic. Our wellbeing benefits include: foursupplemental days off (our “EPIC2” days), life coaching and emotional support,work-life services for employees and their families, and a wellbeing allowance

Pricing

Price: £0.00 a unit a second
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: There is a free 90 day time-limited and usage limited version that canbe used for testing and evaluation purposes.
VMware also offersTanzu Community Edition which is a full-featured, easy-to-manageKubernetes platform for learners and users. It's a freely available,community-supported, open-source distribution of VMware Tanzu.
Link to free trial: https://tanzucommunityedition.io/

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Backup and recovery

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Separation between users

Energy efficiency

Pricing

Service documents

Cookies on Digital Marketplace

Insight Vmware Tanzu RabbitMQ

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Backup and recovery

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Separation between users

Energy efficiency

Social Value

Pricing

Service documents