1. Delivery Optimization - a deep dive
5/21/ :58 PM
BRK2048
Delivery Optimization - a deep dive
Narkis Engler
Program Manager
Windows and Devices Group
Andreas Hammarskjöld
2Pint Software
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. session
Key TakeAways 1. What is Delivery Optimization? 2. How does it work? 3. What can I use now? 4. Why should I care? 5. Cool stuff you can do! 6. What is coming?

3. Introducing the peer-to-peer folks
5/21/ :58 PM
Introducing the peer-to-peer folks
BranchCache Bob
Delivery Optimization Doris
PeerCache Pete
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. It’s DO Doris time!

5. What makes Delivery Optimization unique?
5/21/ :58 PM
What makes Delivery Optimization unique?
Cloud-managed: designed for the cloud era
Distributed cache: each device contributes to reduce the overall bandwidth
Multitasking: downloading from multiple sources
Hybrid: downloads from http and peer sources in parallel
Fast and Furious: downloads are faster and more reliable
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. How does it work? Supported Content Step 1: Publishing
5/21/ :58 PM
How does it work?
Step 1: Publishing
Content is chunked and hashed
Supported Content
Windows Updates: feature/ quality
Security updates
Drivers
Windows Store Apps
Windows Store for Business Apps
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. How does it work? Step 2: Download Client A checks for updates
5/21/ :58 PM
How does it work?
Windows Update +
DO Services
Content
Servers
Step 2: Download
Client A checks for updates
Client A asks Windows Update service for download sources
Service provides Windows Update content server D and clients B and C
Client A requests specific small pieces from D and clients B, C
Source B, C, D fulfill the download request
Client A checks the hash of each piece, discard pieces where hashes don’t match
Client A checks the hash of the entire file before installing D 1 2 4 3 B A 4 4 C
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. How does it work? Step 3: Caching Clients check in with the DO service
5/21/ :58 PM
How does it work?
Windows Update &
DO Services
Step 3: Caching
Clients check in with the DO service
Until the content expires
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Demo Download with LAN peers 5/21/2018 12:58 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. Policies available for IT administrators:
MS Story
5/21/ :58 PM
Policies available for IT administrators:
Group PCs (default is based on NAT external IP)
Control bandwidth limits
Configure cache size
Superset of configuration options available in Settings app
Starting with Windows , used by default in all Windows Update and Windows Store downloads
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Download Strategies DownloadMode Cloud Managed
5/21/ :58 PM
Download Strategies
DownloadMode
HTTP Only (0)
Cloud Managed
Piece level verification
No P2P
HTTP + LAN (1)
HTTP + P2P
Same NAT P2P
HTTP + Group (2)
HTTP + P2P between group of devices
Across NATs
HTTP + Internet (3)
HTTP + P2P with Internet devices
Available only via Insiders Program
Simple Mode (99)
No Cloud
Just plain HTTP
No P2P
Bypass DO completely
Continue using BITS and BC
Bypass (100)
Peer Boundary
In 1511 this means DO is not used
Added in Creators Update (1607)
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Group DownloadMode explained
HTTP + Group (2)
HTTP + P2P between group of devices
Across NATs
Default Grouping
Active Directory Site Name
Authenticate Domain Sid
Custom Grouping
Group ID
GUID

13. Admin configuration example 1
5/21/2018
Admin configuration example 1
Local Network (same NAT)
HTTP + LAN (1)
HTTP + P2P
Same NAT P2P
\\ACMECORP
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Admin configuration example 2
5/21/2018
Admin configuration example 2
Group mode with default group - Domain joined
HTTP + Group (2)
HTTP + P2P between group of devices
Across NATs
\\ACMECORP
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Admin configuration example 3
5/21/2018
Admin configuration example 3
Group mode with Custom Group ID
HTTP + Group (2)
HTTP + P2P between group of devices
Across NATs S
Same GUID
Same GUID
Group ID
GUID
\\ACMECORPUS
\\ACMECORPUK
Note: since RS2, VPN clients do not participate in peer groups by default
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Delivery Optimization Cache Policies
Dedicated cache
20% of free space (default)
Content kept for 24 – 72 hours
Automatic, very selective purge
Policies to control the cache:
MDM Policy Name
GPO Name
DOMaxCacheAge
Max Cache Age (in seconds)
DOMaxCacheSize
Max Cache Size (percentage)
DOAbsoluteMaxCacheSize
Absolute Max Cache Size (in GB)
DOModifyCacheDrive
Modify Cache Drive

17. Content & Device Policies
Requirement for caching:
Min file size: 100 MB or 50 MB in 1703 and higher
Min 32 MB disk size
Policies to control content and device participation
MDM Policy Name
GPO Name
DOMinFileSizeToCache
Minimum Peer Caching Content File Size (in MB)
DOMinRAMAllowedToPeer
Minimum RAM capacity (inclusive) required to enable use of peer caching (in GB)
DOMinDiskSizeAllowedToPeer
Minimum disk size allowed to use peer caching (in GB)

18. Demo Storage policies 5/21/2018 12:58 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Bandwidth Throttling Policies
Throttle HTTP traffic
Impacts both Interactive and Background downloads
MDM Policy Name
GPO Name
DOPercentageMaxDownloadBandwidth
Maximum Download Bandwidth (Percentage)
DOMaxDownloadBandwidth
Maximum Download Bandwidth (in KB/s)

20. Best Practices Or what to do with all these policies..
5/21/ :58 PM
Best Practices
Or what to do with all these policies..
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. 5/21/ :58 PM
Best Practice #1: use Group + group ID to prevent WAN traffic between peers
Complex network topology, hub & spokes?
Using public IPs instead of private IPs in your org?
Set a custom Group ID for each remote office:
Location based
Tied to a range of IP Addresses
DHCP server
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Best Practice #2: Make sure LAN mode is ON
5/21/ :58 PM
Best Practice #2: Make sure LAN mode is ON
Thousands of offices around the globe?
Using WSUS or ConfigMgr?
Default is “LAN” mode
Windows built-in bandwidth reduction
Bandwidth savings in Store Apps
Enable “Express” in ConfigMgr
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Best Practice #3: identify your “preferred” devices
Set policies to extend the use of some devices as peer sources (store more content, for longer time).
Have a larger drive with lots of disk space? Use it to cache!

24. Best Practice #3: identify your “preferred” devices
5/21/ :58 PM
Best Practice #3: identify your “preferred” devices
Use WUfB deployment rings to pre-cache with your “preferred” devices
Windows Update
MDM Policy Name
Value
DOMaxCacheAge
DOMaxCacheSize
50 (%)
DOModifyCacheDrive
D:\AcmeITDOCache
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Best Practice #4: using BranchCache today?
Set DO DownloadMode to 100 – Bypass
Delivery Optimization will not be used.
Instead you will be using BITS & BranchCache if configured

26. Not using any P2P solution yet?
Why? We want to know!
Submit your feedback in the feedback hub under the Windows Update subcategory
Join the Insiders program and get early access to the new features we’re adding

27. Considering using DO and wondering how to test it?
Set policies. Consider using Group DownloadMode
Download Store Apps (larger than 100 MB) on one device then another
Check how much data you got from peers:
DO PowerShell cmdlets (1703)
Delivery Optimization Settings UX: coming in 1709

28. PowerShell Sample Get-DeliveryOptimizationStatus
5/21/ :58 PM
PowerShell Sample
Get-DeliveryOptimizationStatus
Get-DeliveryOptimizationPerfsnap
-Verbose for more info
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Visualization & Analytics

30. Use 2Pint Software StifleR in free ”Report mode”
Other

31. Windows Analytics in OMS
Coming soon – Insights on Delivery Optimzation Usage
Measure your bandwidth savings and tune your delivery optimization configurations accordingly to get a higher peer caching efficiency

32. Delivery Optimization - what’s next?
5/21/ :58 PM
Delivery Optimization - what’s next?
Configure once, leverage across more content!
Office 365 updates with Click-2-Run
ConfigMgr LOB Apps
Intune LOB Apps
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

33. Supported Platforms WU WSUS ConfigMgr Office 365 Click-2-un Intune
Windows Store
BranchCache
No¹
Yes
Yes/No¹
Delivery Optimization
Coming²
Coming
PeerCache No
1. Any data can be made BranchCache aware by using ARR (proxy)
2. Express updates uses DO already

34. Supported Operating Systems
Windows 7
Windows 8
Windows 10
Server 2012
Server
Server Core + Nano (1709)
BranchCache
Yes
Delivery Optimization No
PeerCache

35. Recommendations / call for action
Get up to speed on DO it’s the future of Microsoft’s Peer-to-peer!
Dont ignore or turn it off.

36. More recommendations / call for action
GPO for Group is your best bet
Ladies and Gentlemen – check your proxies!

37. Q & A
Bob & Doris forever

38. Frequently Asked Questions
Does DO work with WSUS?
Yes, devices need to have internet connection for p2p
Which ports does DO use?
DO peer-to-peer traffic: 7680, or 3544 (Teredo). DO client – service communication uses port 80 / 443
Proxy requirements?
Allow Byte Range requests. More info at:
List of hostnames in the next slide

39. Frequently Asked Questions
Which hostnames should I allow in my Firewall for Delivery Optimization to work?
DO Service::
*.do.dsp.mp.microsoft.com
 Payload:
*.download.windowsupdate.com
*.windowsupdate.com
*.dl.delivery.mp.microsoft.com
*.emdl.ws.microsoft.com

40. Please evaluate this session
Tech Ready 15
5/21/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

41. 5/21/ :58 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.