1. Level 300 Windows Server 2012 Networking Marin Franković, Visoko učilište Algebra

2. Level 300 Agenda Hybrid clouds Network virtualization Realibility Predictability Scalability Hyper-V Extensible Switch SR-IOV

3. Level 300 Hybrid cloud Windows Server 2012 is optimized for Hybrid Clouds to host multi- tenant workloads Tenant 2: Multiple VM Workloads Data Center Tenant 1: Multiple VM Workloads

4. Level 300 Hybrid cloud In a multi-tenant environment customers want security and isolation Tenant 2: Multiple VM Workloads Data Center Tenant 1: Multiple VM Workloads

5. Level 300 Multi-tenant network requirements Tenant wants to easily move VMs to/from the cloud Hoster wants to place VMs anywhere in the data center Both want: Easy Onboarding, Flexibility & Isolation Cloud Data Center Woodgrove Bank Blue 10.1.0.0/16 Contoso Bank Red 10.1.0.0/16

6. Level 300 Network virtualization Physical network Physical server Woodgrove VM Contoso VM Woodgrove networkContoso network

7. Level 300 Network virtualization Key points Multiple organizations can have their own isolated networks running atop the same physical fabric The VM is totally unaware that its IP address is being virtualized VMs can now run and live migrate anywhere in the datacenter, even across subnets… Administrators don’t need to worry about VMs being “trapped” in one part of a datacenter because it’s tied to a physical address No other virtualization platform includes this capability. Even those at 10x the cost…

8. Level 300 Realiability Even when hardware fails customers want continuous availability Tenant 2: Multiple VM Workloads Data Center Tenant 1: Multiple VM Workloads TEAMING

9. Level 300 Predictability Even when multiple VMs are competing for bandwidth customers want predictability Tenant 2: Multiple VM Workloads Data Center Tenant 1: Multiple VM Workloads 15 25 $$ $$$$

10. Level 300 Scalability Cloud admins want scalability and customers want performance Tenant 2: Multiple VM Workloads Data Center Tenant 1: Multiple VM Workloads

11. Level 300 Hyper-V Extensible Switch Customers want specialized functionality with lots of choice for firewalls, monitoring and physical fabric integration Tenant 2: Multiple VM Workloads Data Center Tenant 1: Multiple VM Workloads

12. Level 300 Hyper-V Extensible Switch Physical NIC Root Partition Extensible Switch Extension Protocol Extension Miniport Capture Extensions WFP Extensions Filtering Extensions Forwarding Extensions Host NIC VM NIC VM1 VM NIC VM2  Capture extensions can inspect traffic and generate new traffic for report purposes  Capture extensions do not modify existing Extensible Switch traffic  Example: sflow by inMon  Windows Filter Platform (WFP) Extensions can inspect, drop, modify, and insert packets using WFP APIs  Windows Antivirus and Firewall software uses WFP for traffic filtering  Example: Virtual Firewall by 5NINE Software  Filtering extensions can also be implemented using NDIS filtering APIs  Example: VM DoS Prevention by Broadcom  Forwarding extensions direct traffic, defining the destination(s) of each packet  Forwarding extensions can capture and filter traffic  Examples: – Cisco Nexus 1000V and UCS – NEC ProgrammableFlow's vPFS OpenFlow Capture Extensions WFP Extensions Filtering Extensions Forwarding Extensions Filtering Engine BFE Service Firewall Callout

13. Level 300 All inclusive Open, Extensible Virtual Switch Nexus 1000 Support Openflow Support Network Introspection Much more… Advanced Networking ACLs PVLAN …much more… Windows NIC Teaming SR-IOV Network Support Reduce Latency & CPU Utilization Supports Live Migration Network QoS Per VNIC bandwidth reservation & limits Network Metering

14. Level 300 Single-Root I/O Virtualization (SR- IOV) Reduces latency of network path Reduces CPU utilization for processing network traffic Increases throughput Direct device assignment to virtual machines without compromising flexibility Supports Live Migration Network I/O path with SR-IOVNetwork I/O path without SR-IOV Physical NIC Root Partition Hyper-V Switch Routing VLAN Filtering Data Copy Routing VLAN Filtering Data Copy Virtual Machine Virtual NIC SR-IOV Physical NIC Virtual Function

15. Level 300 DEMO

16. Level 300 More info? http://skydrive.frankovic.net Public ► Konferencije ► NT Konferenca ► NTK 2012 marin@frankovic.net

17. Level 300 QUESTIONS? After the session please fill out the questionnaire. Questionnaires will be sent to you by e-mail and will be available in the profile section of the NT Conference website www.ntk.si.www.ntk.si Thank you!