Download presentation
Presentation is loading. Please wait.
1
Server Virtualization
Server & Tools Business 4/29/2018 Server Virtualization Technical Overview Name Title Microsoft © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
2
Agenda Introduction Scalability & Performance Security & Multitenancy
4/29/2018 Agenda Introduction Scalability & Performance Security & Multitenancy Flexible Infrastructure High Availability & Resiliency Virtualization Innovation Summary & Wrap Up
3
Security & Multitenancy
Windows Server Management Marketing 4/29/2018 Security & Multitenancy © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
4
Security & Multitenancy
Ensure workloads have the highest levels of security & isolation with granular control capabilities PVLANS, Virtual Port ACLs, Port Monitoring & Port Mirroring Integrate with new and existing software & hardware investments Meet compliancy requirements with through encryption Hyper-V Extensible Switch DHCP & Router Guard BitLocker Drive Encryption Provide in-box hooks for in-house extensibility and customization Rich partner ecosystem extending platform with powerful solutions
5
Hyper-V Extensible Switch
Layer-2 Network Switch for Virtual Machine Connectivity Hyper–V host Extensible Switch Virtual Ethernet switch that runs in the management OS of the host Exists on Windows Server Hyper-V, and Windows Client Hyper-V Managed programmatically Extensible by partners and customers Virtual machines connect to the extensible switch with their virtual network adaptor Can bind to a physical NIC or team Bypassed by SR-IOV Virtual machine Virtual machine Virtual machine Network application Network application Network application Virtual network adapter Virtual network adapter Virtual network adapter Hyper‑V Extensible Switch Physical network adapter Physical switch
6
Hyper-V Extensible Switch
Layer-2 Network Switch for Virtual Machine Connectivity Granular In-box Capabilities ARP/ND Poisoning (spoofing) protection DHCP Guard protection Virtual Port ACLs Trunk Mode to VMs Network Traffic Monitoring Isolated (Private) VLAN (PVLANs) PowerShell & WMI Interfaces for extensibility Hyper–V host Virtual machine Virtual machine Virtual machine Network application Network application Network application Virtual network adapter Virtual network adapter Virtual network adapter Hyper‑V Extensible Switch Physical network adapter Physical switch
7
Isolated (Private) VLANs
Segregate traffic within VLANs Enables Isolation of virtual machines from other virtual machines even within the same VLAN Creation of community groups of virtual machines that can exchange data packets 3 Port Types Isolated Community Promiscuous Guest OS Guest OS Guest OS Guest OS Guest OS 2, (4) 2 , (4) 2, (5) 2, (5) 2, (5) 2, (4, 5) PVLAN Port types: Isolated Community Promiscuous Trunk mode Virtual Physical NIC NIC Example PVLAN: ‒ Primary VLAN ID is 2 ‒ Secondary VLAN IDs are 4 and 5
8
Extending the Extensible Switch
Build Extensions for Capturing, Filtering & Forwarding Virtual Machine Virtual Machine 2 Platforms for Extensions Network Device Interface Specification (NDIS) filter drivers Windows Filtering Platform (WFP) callout drivers Extensions NDIS filter drivers WFP callout drivers Ingress filtering Destination lookup and forwarding Egress filtering Parent Partition VM NIC Host NIC VM NIC Virtual Switch Extension Miniport Extension Protocol Capture Extensions Extension A Filtering Extensions Extension C Forwarding Extension Extension D Physical NIC Hyper‑V Extensible Switch architecture
9
Extending the Extensible Switch
Build Extensions for Capturing, Filtering & Forwarding Virtual Machine Virtual Machine Many Key Features Extension monitoring & uniqueness Extensions that learn VM life cycle Extensions that can veto state changes Multiple extensions on same switch Several Partner Solutions Available Cisco – Nexus 1000V & UCS-VMFEX NEC – ProgrammableFlow PF1000 5nine – Security Manager InMon - SFlow Parent Partition VM NIC Host NIC VM NIC Virtual Switch Extension Miniport Extension Protocol Capture Extensions Extension A Filtering Extensions Extension C Forwarding Extension Extension D Physical NIC Hyper‑V Extensible Switch architecture
10
Demo Extensible Switch
4/29/2018 Demo Extensible Switch
11
BitLocker Drive Encryption
4/29/2018 BitLocker Drive Encryption In-box Disk Encryption to Protect Sensitive Data VHDX on Traditional LUN E:\VM2 Data Protection, built in Supports Used Disk Space Only Encryption Integrates with TPM chip Network Unlock & AD Integration Multiple Disk Type Support Direct Attached Storage (DAS) Traditional SAN LUN Cluster Shared Volumes Windows Server 2012 File Server Share VHDX on DAS F:\VM1 VHDX on Cluster Shared Volumes C:\ClusterStorage\Volume1\VM4 VHDX on File Server \\FileServer\VM3
12
Flexible Infrastructure
Windows Server Management Marketing 4/29/2018 Flexible Infrastructure © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
13
Flexible Infrastructure
Complete flexibility for migrating virtualized workloads without interruption or downtime Simultaneous Live Migration Live Cloning Storage Live Migration Enable a scalable, isolated, multitenant infrastructure without VLANs Duplicate virtual machines for testing & troubleshooting Live Migration Upgrades Live Migration with Compression Live Migration over RDMA Live Migration over SMB Support for non-Microsoft guest operating systems Shared Nothing Live Migration Upgrade to the latest version of Hyper-V without downtime for key workloads Network Virtualization
14
Linux Support on Hyper-V
4/29/2018 Linux Support on Hyper-V Comprehensive feature support for virtualized Linux Significant Improvements in Interoperability Multiple supported Linux distributions and versions on Hyper-V. Includes Red Hat, SUSE, OpenSUSE, CentOS, and Ubuntu Comprehensive Feature Support 64 vCPU SMP Virtual SCSI, Hot-Add & Online Resize Full Dynamic Memory Support Live Backup Deeper Integration Services Support Configuration Store Worker Processes Applications Applications Management Service WMI Provider Enlightened Mode Optimized Performance Optimized Synthetic Devices Enlightened Mode Optimized Performance Optimized Synthetic Devices Windows Kernel Virtual Service Provider Virtualization Service Client Virtualization Service Client Independent Hardware Vendor Drivers Hyper-V Server Hardware
15
Virtual Machine Live Cloning
4/29/2018 Virtual Machine Live Cloning Duplication of a Virtual Machine whilst Running Export a clone of a running VM Point-time image of running VM exported to an alternate location Useful for troubleshooting VM without downtime for primary VM Export from an existing checkpoint Export a full cloned virtual machine from a point-in-time, existing checkpoint of a virtual machine Checkpoints automatically merged into single virtual disk VM1 VM2 1 User Initiates an export of a running VM 2 Hyper-V performs a live, point-in-time export of the VM, which remains running, creating the new files in the target location 3 Admin imports new, powered-off VM on the target host, finalizes configuration and starts VM 4 With Virtual Machine Manager, Admin can select host as part of the clone wizard
16
Live Migration Faster, Simultaneous Migration of VMs Without Downtime
Faster live migrations, taking full advantage of available network Simultaneous Live Migrations Uses SMB Direct if network bandwidth available is over 10 gigabits Supports flexible storage choices No clustering required if virtual machine resides on SMB 3.0 File Share Modified pages transferred Storage handle moved Memory pages transferred Live migration setup VM VM VM Memory content Configuration data Modified memory pages MEMORY MEMORY IP connection Target host iSCSI, FC or SMB Storage
17
Live Migration Compression
4/29/2018 Live Migration Compression Intelligently Accelerates Live Migration Transfer Speed Memory pages compressed, then transferred Storage handle moved Modified pages compressed, then transferred Live migration setup Utilizes available CPU resources on the host to perform compression Compressed memory sent across the network faster Operates on networks with less than 10 gigabit bandwidth available Enables a 2X improvement in Live Migration performance VM VM VM MEMORY MEMORY Modified memory pages Configuration data Memory content IP connection Target host iSCSI, FC or SMB Storage
18
Live Migration over RDMA
4/29/2018 Live Migration over RDMA Harness RDMA to Accelerate Live Migration Performance Storage handle moved Memory pages transferred at high speed Live migration setup Modified pages transferred at high speed Remote Direct Memory Access delivers low latency network, CPU utilization & higher bandwidth Supports speeds up to 56Gb/s Windows Server 2012 R2 supports RoCE, iWARP & Infiniband RDMA solutions Delivers the highest performance for Live Migrations Cannot be used with Compression VM VM VM Modified memory pages Configuration data Memory content MEMORY MEMORY IP Connection using RDMA Target host iSCSI, FC or SMB Storage
19
Storage Live Migration
4/29/2018 Storage Live Migration Move virtual hard disks attached to a running virtual machine Manage storage in a cloud environment with greater flexibility and control Move storage with no downtime Update physical storage available to a virtual machine (such as SMB-based storage) Windows PowerShell cmdlets Disk writes are mirrored; outstanding changes are replicated Reads and writes go to new destination VHD Disk contents are copied to new destination VHD Reads and writes go to the source VHD Increased Flexibility through Live Migration of VM Storage Virtual machine Host running Hyper‑V Source device Target device VHD VHD
20
Shared-Nothing Live Migration
4/29/2018 Shared-Nothing Live Migration Reads and writes go to the source VHD. Live Migration Begins Reads and writes go to the source VHD Disk contents are copied to new destination VHD Live Migration Continues Live Migration Completes Disk writes are mirrored; outstanding changes are replicated Complete Flexibility for Virtual Machine Migrations Increase flexibility of virtual machine placement & increased administrator efficiency Simultaneously live migrate VM & virtual disks between hosts Nothing shared but an ethernet cable No clustering or shared storage requirements Reduce downtime for migrations across cluster boundaries Virtual machine Destination Hyper‑V Virtual machine Source Hyper‑V Live Migration MEMORY MEMORY Configuration data Memory content Modified memory pages IP connection Source device Target device VHD VHD
21
Demo Virtual Machine Migrations
4/29/2018 Demo Virtual Machine Migrations
22
Live Migration Upgrades
4/29/2018 Live Migration Upgrades Simplified upgrade process from 2012 to 2012 R2 Customers can upgrade from Windows Server 2012 Hyper-V to Windows Server R2 Hyper-V with no VM downtime Supports Shared Nothing Live Migration for migration when changing storage locations If using SMB share, migration transfers only the VM running state for faster completion Automated with PowerShell One-way Migration Only Hyper-V Cluster Upgrade without Downtime 2012 Cluster Nodes 2012 R2 Cluster Nodes 1 2 3 1 2 3 Hyper-V Hosts SMB Storage
23
Network Virtualization
Network Isolation & Flexibility without VLAN Complexity Blue Network Red Network Secure Isolation for traffic segregation, without VLANs VM migration flexibility Seamless Integration Key Concepts Provider Address – Unique IP addresses routable on physical network VM Networks – Boundary of isolation between different sets of VMs Customer Address – VM Guest OS IP addresses within the VM Networks Policy Table – maintains relationship between different addresses & networks Network/VSID Provider Address Customer Address Blue (5001) Red (6001)
24
Network Virtualization through NVGRE
Network Isolation & Flexibility without VLAN Complexity Network Virtualization using Generic Route Encapsulation uses encapsulation & tunneling Standard proposed by Microsoft, Intel, Arista Networks, HP, Dell & Emulex VM traffic within the same VSID routable over different physical subnets VM’s packet encapsulated for transmission over physical network Network Virtualization is part of the Hyper-V Switch > GRE Key (5001) MAC > Same Customer Network & VSID Different Subnets
25
Network Virtualization Packet Flow
Windows Server Management Marketing 4/29/2018 Network Virtualization Packet Flow Where is ? Blue1 Blue2 Network Virtualization Packet Flow Blue1 sending to Blue2 VSID 5001 Where is ? Blue1 sends ARP Packet to locate Hyper-V Switch broadcasts ARP on VSID 5001 Hyper-V Switch then broadcasts ARP to the rest of the network, but intercepted by NV Filter Note: ARP not broadcast on physical network NV Filter checks its Policy Table and responds with Blue2 MAC NV Filter sends ARP Response back into Hyper-V Switch and on to Blue1 VSID 5001 Hyper-V Switch VSID ACL Enforcement Hyper-V Switch VSID ACL Enforcement Network Virtualization Network Virtualization IP Virtualization Policy Enforcement Routing IP Virtualization Policy Enforcement Routing ARP TABLE 34:29:af:c7:d9:12 34:29:af:c7:d9:12 MACPA1 MACPA2 © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
26
Network Virtualization Packet Flow
Windows Server Management Marketing 4/29/2018 Network Virtualization Packet Flow MACB1 -> MACB2 > Packet Blue1 Blue2 Network Virtualization Packet Flow Blue1 sending to Blue2 VSID 5001 Packet VSID 5001 Blue1 starts to construct its packet for Blue2 and sends it to the Hyper-V Switch VSID Packet VSID Hyper-V Switch VSID ACL Enforcement Hyper-V Switch VSID ACL Enforcement Hyper-V Switch attaches the VSID GRE 5001 MACB1 -> MACB2 > Network Virtualization NV Filter checks to see if Blue1 is allowed to contact Blue2, then constructs GRE Packet and sends it across the physical network Network Virtualization IP Virtualization Policy Enforcement Routing GRE Packet VSID IP Virtualization Policy Enforcement Routing Packet VSID MACP1 -> MACP2 > 5001 MACB1 -> MACB2 > On receiving host, opposite process takes place – NV Filter strips GRE, pulls out the VSID information, passes packet to Hyper-V Switch, where VSID removed and packet sent to Blue2 VM MACPA1 MACPA2 © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
27
Network Virtualization Gateway
Bridge Between VM Networks & Physical Networks Contoso Fabrikam Multi-tenant VPN gateway in Windows Server 2012 R2 Integral multitenant edge gateway for seamless connectivity Guest clustering for high availability BGP for dynamic routes update Encapsulates & De-encapsulates NVGRE packets Multitenant aware NAT for Internet access Resilient HNV Gateway Resilient HNV Gateway Internet Resilient HNV Gateway Service Provider Hyper-V Host Hyper-V Host
28
Evaluate | Train | Certify
4/29/2018 Evaluate | Train | Certify Get the evaluation Microsoft Server and Cloud Platform: Get trained Microsoft Virtual Academy: Get certified Microsoft Learning:
29
© 2013 Microsoft Corporation. All rights reserved
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
Similar presentations
