VMware migration to Hyper-V A case study & its evolution Guillaume Lacaille & Lionel Cau Sogeti Switzerland Virtualisation Senior Consultants

A Case Study... 25’ ...and its evolution 25’ Conclusion 10’ Company context A strategic choice to make Breaking old ideas Performing the migration ...and its evolution 25’ Hyper-V 2012 R2 new features SVMM 2012 R2 new features The main improvements we are planning to perform and why Demonstration Conclusion 10’ Q&A

Sogeti, who we are

VMware migration to Hyper-V A case study

The Customer: Establishing picture United Nations customer 3 Old server rooms About 200 Virtual Machines Windows Server 2000 to 2008R2 Netware Servers Linux Servers (Ubuntu, Red Hat, CentOS…) VMware vSphere 4.1 / 20 hosts NetApp SAN EoL

The customer requirements 2 new datacenters for production Support current and future workload Replication for DRP Private Cloud capable architecture Support of purchased hardware HP Blade servers NetApp Cisco Nexus + 1000v (optional)

VMware versus Hyper-V VMware 20 Licenses of VMware vSphere 4.1 No VMware subscription (=no fre upgrade) Microsoft Software Assurance System Center Operation Manager

VMware versus Hyper-V VMware 20 Licenses of VMware vSphere 4.1 No VMware subscription (=no free upgrade) Microsoft Software Assurance System Center Operation Manager Migration to Hyper-V or VMware equal in time Gap in skillset to vCloud or SCVMM identical

VMware versus Hyper-V: Shopping list VMware vCloud Windows Server 2012 Datacenter vCloud Enterprise plus (incl. SRM and Cisco 1000v support) Centralized backup solution Microsoft Hyper-V + SC System Center Virtual Machine Manager 2012 SP1

Breaking old ideas Hyper-V is right only for Branch Offices Hyper-V cannot be compare to VMware in terms of features Hyper-V supports a very limited range of Guest OS Hyper-V does not support high-performance network …

Breaking old ideas Gartner: “ Microsoft has improved its server virtualization products to the point that IT leaders should assess their VMware investments and consider whether Microsoft makes sense. Compare acquisition costs, ease of management and functionality for the two vendors and take advantage of their competitiveness.” 1 1How to Choose Between Hyper-V and vSphere (9 October 2013) http://www.gartner.com/technology/reprints.do?id=1-1LV8IX1&ct=131016&st=sb

Final Hyper-V Infrastructure

Final Hyper-V Infrastructure 12 Hyper-V 2012 Hosts 2 VMware ESXi 5.1 Hosts SC Virtual Machine Manager 2012 SP1 Hyper-V and VMware integration Storage integration SMI-S Networks managed by VMM (incl. Teaming) Converged Network

Success story: Migration to Hyper-V Challenge Migration of 180 Virtual Machines Constraints OS: Windows 2000 to 2008R2, Linux, Appliances, Netware… No virtual machines is domain joined As usual, migration out of business hours, limited downtime

Toolbox: SCVMM 2012 SP1 Legacy VMware Cluster Hyper-V Cluster

Application owner involment Process Application owner involment Before the migration Check network / destination lun on Hyper-V Cluster Check VM Health: no snapshot, restart the VM Save Network configuration During the migration Remove VMware tools and VMware network card Move virtual machine using VMM / Powershell scripts Configure network and restart system After the migration Check connectivity, system and application logs, integration tools Proceed application check After secure time Remove virtual machine on VMware infrastructure (V2V is non-destructive operation)

Tips to sleep at night: Networking Save network configuration C:\> Netsh dump > network.cfg C:\> Netsh exec network.cfg Remove ghost NIC C:\> set devmgr_show_nonpresent_devices=1 C:\> start devmgmt.msc

Tips to sleep at night: Old Windows Old Operating System support Windows NT4 and Windows 2000 (unsupported) Powershell Hyper-V Module PS C:\> Set-VMProcessor – VMName <yourvm> -CompatibilityForOlderOperatingSystemEnabled Integration tools for Windows 2000 Get Hyper-V 2008 R2 integration tools C:\Windows\System32\vmguest.iso

Tips to sleep at night: VHD vs VHDX VMM convert VMDK to VHD during V2V

Tips to sleep at night: Automation Powershell is your best friend 1 http://www.ravichaganti.com/blog/?p=2766 Task Cmdlet Migrate Virtual Machine New-SCV2V Configure VM Network Set-SCVirtualNetworkAdapter Convert VHD to VHDX Convert-SCVirtualDiskDrive <VHDdisk> -VHDX -DeleteSource Configure Guest IP configuration Set-VMNetworkConfiguration1

3rd party migration tools Microsoft Assessment & Planning Toolkit Agentless inventory and reporting tool Microsoft Virtual Machine Converter + Automation Toolkit Migrate Windows virtual machines that are domain joined Remove VMware tools and configure network Can be all automated using Powershell Others: 5nine Easy Converter, Double-Take move

And what about unsupported stuff ? Unix, Netware and virtual appliance

A case study … … and its evolution

What’s new in Hyper-V in Windows Server 2012 R2 Feature or functionality New or updated Shared virtual hard disk Hyper-V in Windows Server 2012 R2 Preview enables clustering virtual machines by using shared virtual hard disk (VHDX) files. Resize virtual hard disk Hyper-V storage has been updated to support resizing virtual hard disks while the virtual machine is running. Storage Quality of Service Storage QoS enables you to manage storage throughput for virtual hard disks that are accessed by your virtual machines Live migrations Hyper-V live migration has been updated to allow the administrator to select the optimal performance options when moving virtual machines to a different server. Virtual machine generation Virtual machine generation determines the virtual hardware and functionality that is presented to the virtual machine: Secure Boot (enabled by default) Boot from a SCSI virtual hard disk Boot from a SCSI virtual DVD PXE boot by using a standard network adapter UEFI firmware support

What’s new in SCVMM 2012 R2 (source: http://www.aidanfinn.com) Feature or functionality New or updated 3rd party Software Defined Networking Is supported by the extensibility of the virtual switch. Automatic Guest Activation Customers running WS2012 R2 Datacenter can automatically activate their WS2012 R2 guests without using KMS. Works with OEM and volume licenses. Great for multi-tenant clouds. Built-In NVGRE Gateway A multi-tenant aware NVGRE gateway role is available in WS2012 R2. Offers site-site VPN, NAT for Internet access, and VM Network to physical network gateway. Clustering: Proactive Server Service Health Detection The health of a destination host will be verified before moving a VM to another host. Clustering: Protected Networks Virtual NICs are marked as being on protected networks by default. If a virtual NICs’ virtual switch becomes disconnected then the cluster will Live Migrate that VM to another host with a healthy identical virtual switch. Compressed Live Migration Using only idle CPU resources on the host, Hyper-V can compress Live Migration to make it quicker. Could provide up to 2x migrations on 1 GbE networks. Cross-Version Live Migration You can perform a Live Migration from WS2012 to WS2012 R2. This is one-way, and enables zero-downtime upgrades from a WS2012 host/cluster to a WS2012 R2 host/cluster. Dynamic Mode NIC Teaming In addition to Hyper-V Port Mode and Address Hashing. Uses “flowlets” to give fine-grained inbound and outbound traffic. Generation 2 VM A G2 virtual machine is a VM with no legacy “hardware”. It uses UEFI boot, has no emulated devices, boots from SCSI, and can PXE boot from synthetic NIC. You cannot convert from G1 VM (UEFI I am guessing).

What’s new in SCVMM 2012 R2 (source: http://www.aidanfinn.com) Feature or functionality New or updated HNV Diagnostics A new PoSH cmdlet enables an operator to diagnose VM connectivity in a VM Network without network access to that VM. HNV: Dynamic Learning of CAs Hyper-V Network Virtualization can learn the IPs of VM Network VMs. Enables guest DHCP and guest clustering in the VM Network. HNV: NIC Teaming Inbound and outbound traffic can traverse more than one team member in a NIC team for link aggregation. HNV: NVGRE Task Offloads A new type of physical NIC will offload NVGRE de- and encapsulation from the host processor. HNV: Virtual Switch extensions The HNV filter has been included in the Hyper-V Virtual Switch. This enables 3rd party extensions to work with HNV CAs and PAs. Hyper-V Replica Extended Replication You can configure a VM in Site A to replicate to Site B, and then replicate it from Site B to Site C. Hyper-V Replica Finer Grained Interval controls You can change the replication interval from the default 5 minutes to every 30 seconds or every 15 minutes. IPAM IP Address Management was extended in WS2012 R2 to do management of physical and virtual networking with built-in integration into SCVMM 2012 R2. Live Resizing of VHDX You can expand or shrink (if there’s un-partitioned space) a VHDX attached to a running VM. It must be SCSI attached.  This applies to Windows and Linux. Live Virtual Machine Cloning You can clone a running virtual machine. Useful for testing and diagnostics.

What’s new in SCVMM 2012 R2 (source: http://www.aidanfinn.com) Feature or functionality New or updated Remote Live Monitoring Remote monitoring of VM network traffic made easier with Message Analyzer. Shared VHDX Up to 8 VMs can share a VHDX (on shared storage like CSV/SMB) to create guest clusters. Appears like a shared SAS drive. SMB Live Migration This feature uses SMB to perform Live Migration over 10 GbE or faster networks. It uses SMB Multichannel if there are multiple Live Migration networks. SMB Direct is used if RDMA is available.  SMB Multichannel gives the fastest VM movement possible, and SMB Direct offloads the work from the CPU. Now moving that 1 TB RAM VM doesn’t seem so scary! SMB 3.0: Bandwidth controls QoS just sees SMB 3.0. New filters for default, live migration, and virtual machine allow you to manage bandwidth over converged networks. Network Diagnostics New PowerShell tools for testing the networking of VMs, including Get-VMNetworkAdapter, Test-NetConnection, Test-VMNetworkAdapter, and Ping -P. Virtual Machine Exports You can export a VM with snapshots/checkpoints Virtual Switch Extended Port ACLs ACLs now include the socket port number.  You can now configure stateful rules that are unidirectional and provide a timeout parameter. Compatibility with Hyper-V Network Virtualization. vRSS Virtual Receive Side Scaling leverages DVMQ on the host NIC to enable a VM to use more than 1 vCPU to process traffic. Improves network scalability of a VM. Windows Azure Pack This was previously called Windows Azure Services for Windows Server. It allows companies (such as hosting companies) to provide a self-service portal (with additional cloud traits) for their cloud.

Networking in Windows Server 2012 R2 Cloud Scale Performance & Diagnosability Comprehensive SDN Core Infrastructure Enhancements vRSS Remote Live Monitoring NIC Teaming Hyper-V Network Virtualization Hyper-V Switch Hybrid Forwarding Standards based Switch Management Cloud Gateways IPAM for Virtualized Datacenters DNS Enhancements for Service Providers Extended ACLs Test-NetConnection Enhanced HNV Diagnostics

NIC Teaming Windows Server 2012 Windows Server 2012 R2 NIC Team Identify Virtual adapters Team network adapter Operating system 8 x 1Gb NICs – 8Gb throughput Windows Server 2012 Provides network fault tolerance and continuous availability Aggregates bandwidth from multiple network adapters Windows Server 2012 R2 Introduces a new mode, Dynamic mode. Balances based on flowlets (a burst of packets from the same flow followed by an idle interval) Optimized utilization of a team on existing hardware NIC Team Identify Dynamic NIC Teaming optimizes utilization of a team on existing hardware, thereby maximizing ROI

NIC Teaming Live Migration over NIC Team in Switch Independent Mode With Dynamic Load Balancing rocks ! all NICs are used  no negative impact due to out of order packets since one single live migration sticks to a single team member

NIC Teaming and Converged Networks Converged Fabrics tends to simplify data center management by consolidating all communication (Management, LiveMigration, Storage, Cluster) onto a single fabric for ease of management and better utilization of high availability features like Teaming Two issues before: Non optimized NIC Teaming No QoS on Standard Hyper-V Virtual Switch

Converged Fabric with Windows Server 2012 R2 and SCVMM 2012 R2 Management OS Group all (or nearly) pNICs in one team Provide multiple vNICs, each with its own workload and QoS policy Management Hosted VM Live Migration Storage Clustering Hyper-V Extensible Switch NIC Teaming 2x10 Gbps

DEMO Converged Fabric

Requirements to transform networking TechReady 16 4/21/2017 Requirements to transform networking Deliver networking as part of pooled, automated infrastructure Ensure multitenant isolation, scale and performance Expand datacenter capacity seamlessly as per business needs Reduce operational complexity © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What is Software-defined Networking (SDN)? Enables software to dynamically manage the network Abstracting the physical network with virtual networks Spanning policies across physical and virtual networks Controlling datacenter traffic flow

Hyper-V Network Virtualization Benefits Workload Owners Seamless migration to the cloud Move n-tier topology to the cloud Preserve policies, VM settings, IP addresses Enterprises Private Cloud datacenter consolidation and efficiencies Extension of datacenter into hybrid cloud Incremental integration of acquired company network infrastructure Hosters Bring Your own IP Bring Your network topology Scalable multi-tenancy Private/Public Cloud Datacenter Admins Flexible VM placement without reconfiguration Decoupling of server and network admin roles increases agility

Abstracting the network with Hyper-V Network Virtualization (HNV) Multiple virtual networks on a physical network Each virtual network has illusion it is running as a physical network Contoso virtual machine Fabrikam virtual machine Contoso network Fabrikam network How network virtualization works Overlays physical network Encapsulation using NVGRE protocol VIRTUALIZATION Physical server Physical network 37

Hyper-V Network Virtualization Enhancements Windows Server 2012 HNV is a NDIS LWF Scalable network virtualization solution Centralized policy + distributed router Works across physical subnets Hyper-V Network Virtualization Enhancements Physical network VIRTUALIZATION Contoso network Fabrikam network Windows Server 2012 R2 HNV is part of the Hyper-V Switch Dynamically learn Customer Addresses Support Hyper-V Clustering Enhanced performance + diagnostics 38

Hyper-V Network Virtualization: What’s new in Windows Server 2012 R2 SQL Server Web Contoso sees Fabrikam sees SQL Server Web Dynamically Learned Customer Addresses Highly available Windows gateways, hosts, VMs Performance Improvements NIC Teaming Integration NVGRE Task Offload Enabled NICs Enhanced diagnostics of virtual networks 10.1.1.2 10.1.1.1 10.1.1.3 CUSTOMER ADDRESS SPACE 10.1.1.1 10.1.1.2 10.1.1.3 10.1.1.2 192.168.1.10 10.1.1.3 192.168.2.12 10.1.1.2 192.168.1.10 10.1.1.3 192.168.2.12 192.168.n.n PROVIDER ADDRESS SPACE (PA) 192.168.2.12 192.168.1.10 Hyper-V 1 Hyper-V Host 2 10.1.1.2 192.168.1.10 10.1.1.3 192.168.2.12 10.1.1.2 192.168.1.10 10.1.1.3 192.168.2.12 10.1.1.2 192.168.1.10 10.1.1.3 192.168.2.12 10.1.1.2 192.168.1.10 10.1.1.3 192.168.2.12 SQL Server SQL Server Web Web

Managing SDN with System Center 2012 R2 Virtual Machine Manager Challenges Manage a large number of physical and virtual switches Integrate management of physical and virtual networks Solution Logical Network Organizes and simplifies network assignments for hosts, virtual machines and services Integrated physical and virtual switch VLAN policy VM Network Creation/deletion of isolated virtual network overlay (HNV) on physical network VM Network Logical NW Physical Network Subnet 10.0.0.0/26 VLAN 25 Fabric Virtual Extension

Managing SDN with System Center 2012 R2 Virtual Machine Manager (contd Challenges Allow seamless migration of VM while maintaining network policy Solution Logical Switch Single logical entity spanning hosts Consistent policy and configuration Management of Hyper-V Extensible Switch Installation and configuration of switch extensions Configuration of network policies Network policies automatically move with the VM Includes 3rd party extensions VM Network Logical NW Physical Network Subnet 10.0.0.0/26 VLAN 25 Fabric Virtual Extension

Should I use a logical switch? TechReady 16 4/21/2017 Should I use a logical switch? Why? Automatic team creation Configuration for DC on a single object Compliance Access to hyper-v port settings 3rd party extension management Updates get applied to all hosts Why not? More up-front configuration Not manageable through Hyper-V console manager © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Network Virtualization – A layers’ view

My own version of the object model

Core Networking Configurations using SCVMM 2012 R2 DEMO Core Networking Configurations using SCVMM 2012 R2

Enhanced Diagnostics with HNV (NEW in R2) Message Analyzer Decodes the NVGRE packet format Filter either on the CA or PA Packet data Ping –p Allows pinging PAs Test-VMNetworkAdapter Allows an admin without access to the VM to validate the CA space configuration HNV responds to ICMP request to the default gateway Allows pinging the IP address of the CA default gateway (distributed router)

Extended ACLs Windows Server 2012 Windows Server 2012 R2 TechEd 2013 4/21/2017 3:57 AM Extended ACLs Virtual Machine Windows Server 2012 Enabled traffic to be allowed/blocked based on source and destination VM Windows Server 2012 R2 Allows or blocks traffic for specific workloads Filter traffic based on: Network address Application port Protocol type Stateful packet inspection Parent Partition VMNIC ACLs Virtual Switch Extension Miniport Extension Protocol Capture Extensions Extension A Extension C Filtering Extensions Extension D Forwarding Extension Physical NIC © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IP Address Management (IPAM) Windows Server 2012 R2 Manages virtual address space in addition to physical address space Imports and exports network configurations automatically through plugin for System Center Virtual Machine Manager Enables synchronization of Active Directory Sites and subnets information with IPAM Lets admins define user roles, access scope and access policy through role-based access control Hoster friendly DNS monitoring that provides per zone statistics Network Administrator Fabric Administrator System Administrator Forensics Investigator IPAM Client Win vNext WCF PS/WS Man VMM Server SC vNext MS SQL Server SQL 2008 R2, SQL 2012 Role Based Access Control Integration Plugin IPAM Server WS vNext IPAM Administrator IPAM ASM Administrator IPAM MSM Administrator IPAM Users IPAM Audit Administrator Server Discovery Server Configuration Address Utilization Event Collection Server Availability Server Monitoring Address Expiry DHCP Server WS08 Security Groups Data collection tasks DNS Server WS08 R2 & SPs DC Server WS8 NPS Server WS vNext Enable cost-effective connectivity and network automation in virtualized private, hoster, and hybrid cloud deployments

Lots of question Where do I start, what do I do next? How do I offer networking to my virtualization workloads? How do I make my network resilient to failure? How do I provide tenant self service? How can I provide isolation? How do I maintain consistency in large datacenters?

Steps to a successful deployment Design Draw your network requirements. Ask questions up front and get answers. Hardware Use hardware that supports your design. Iterate back on your design. Configure hardware. VMM configuration Create logical objects Configure hosts Add tenants Deploy workloads

Hyper-V and SCVMM: a case study and its evolution Conclusion

Conclusion Hyper-V 2012 R2 and SCVMM 2012 R2 do represent a MAJOR improvement in the Microsoft virtualization technologies portfolio Old ideas must be forgotten and Microsoft technologies are certainly to consider when implementing a new environment, including for mission-critical systems Hyper-V Network Virtualization is a little bit complex to understand but it’s certainly worthwhile: HNV is very powerful and ready for deployment in your datacenters

Recommended reading VMM Technet Reference http://technet.microsoft.com/en-us/library/gg610610.aspx System Center: Virtual Machine Manager Engineering Blog http://blogs.technet.com/b/scvmm/ Guillaume Lacaille’s blog http://www.vinfra.ch Arnaud Lheureux’s blog http://blogs.technet.com/b/arnaud/ Aidan Finn’s blog http://www.aidanfinn.com

Question and Answers Thank you

4/21/2017 3:57 AM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.