1. BranchCache, BITS & DeDupe in ConfigMgr 500 and Beyond.. Phil Wilcock/Senior @phil2pint senior@2pintsoftware.com Andreas Hammarskjold/Junior @andhammarskjold junior@2pintsoftware.com

2. How hard do you want it? 100 - 200 300 - 400 >500 “Since 1969 I have never used Microsoft Windows, have never used Apples’ systems, and have never shaved my beard.” – http://LinuxBeard.com

3. #MMSMOA @phil2pint Co-Founder 2Pint Software London, UK Phil Wilcock Swynk.com! microsoft.public. sms 6 Cows 15 ‘puters 7 Pigs 2 ‘puters

4. #MMSMOA @andhammarskjold Co-Founder Vp Skunkworks Mssms list myITForum 18 Gothenburg, Sweden Andreas Hammarskjöld

5. Enough About Us – What about you? Who’s ConfigMgr Geeks? Who knows BranchCache? Who likes Dedup? Keep your hand up if you like BranchCache! Who can read C++ code?

6. Agenda BranchCache/BITS 101 Microsoft Peer-2-Peer Nutfest 2Pint Free Tools & stuff ConfigMgr Implementation Step by Step Tips & Tricks Tough Issues like BITS & Office 365

7. What is BranchCache? A copy is kept on the local LAN 1st user gets a file from remote server Local transfer is faster and “cheaper” 2nd user gets the copy, not the original

8. Server Get BranchCache Concepts Get Data ID Data ID Data Typically a Wide Area Network

9. Demo Let’s ROCK! The Impossible Dream? (All Free tools!)

10. BranchCache 101 Primer Sneaked out with Vista... Server/Client with Distributed or Hosted Mode V1 = Windows 7 = like your first great love... V2 = Deduplication = Pure Awesomeness = love of life! Transfer De-Duped before it’s even Peer-2-Peer Secure as SHA-512 (Basically secure as it gets)

11. BITS – the forgotten Hero – Codename Drizzle! Just chugs away doing its thang – until.. BITS Policy = Confusion! Is it really Bandwidth Aware?

12. BITS – Who/What uses it? How does ConfigMgr use BITS? Google – Chrome and addons Office 365 – Lots…Exchange – think OAB updates! Adobe – All updates! Windows Update – Yeah! Intune..and so on...

13. Demo DupeDeDupe

14. General BranchCache & BITS Factoids BranchCache is in most Windows (BITS integration) 80-90% efficiency per client (V2) Win 8/10 implementation is ”kick-ass” with dedup Extremely efficient for updating ”static” content like.wimc. Platform for *nix support in Prequel 

15. The Microsoft WorldReal World There is no spoon! Right?

16. The Microsoft P2P Nutfest Windows Marketing Team The ConfigMgr Team The BITS Team The BranchCache Team Delivery Optimization We will evaluate which technology that is best.

17. BranchCache vs WinPE PeerCache  Only BC does Partial Content  Only BC does De-Duplication  Only BITS & BC is ”Bandwidth Aware”  Only BITS & BC is for all content & scenarios  Only BC is open, documented with API, free to play with and awesome

18. Delivery Optimization(DO) vs BranchCache DO is a ”junkie dowloader” Think protocol on amphetamine - I need my fix NOW! Aimed at consumer (Xbox etc) and SME (WUB) DO is designed for CDN type content Bandwidth awareness on the roadmap DO requires server component (think torrent file) 'Some' control via GPO (but not B/W throttling) Works on the concept of 'Swarm' of clients  

19. Demo Results are in!

20. What does 2Pint Software add to the mix?  Reporting - Free  OSD Components - Free  Knowledge - Free  Inside MS information - Paid for in Blood and Sweat Some really cool (non-free) products that we can't really talk about :-)

21. Reporting  Framework for reporting BITS & BranchCache data  Flexible – Works with any Structure  First out was ConfigMgr Reports  Released today is the Standalone Version

22. High Level Reports

23. Detailed Reports – DeDupe Heaven

24. Detailed Report – BranchCache Crowd’s

25. When Things Go Wrong!

26. BranchCache for OSD Toolkit Components  WinPE Creator (Services & Binaries etc)  Task Sequence Command Line Tool (Enable BC)  Task Sequence Download Tool (ACP)  Download Tool for WinPE for standard MDT? http://2pintsoftware.com/branchcache-enable-task-sequences-sccm/ http://2pintsoftware.com/products/branchcache-for-osd- toolkit/

27. Demo So how did we do it? BC in ConfigMgr in <10min

28. BranchCache + ConfigMgr Setup Checklist  Enable DeDup on Content Servers (DPs) + Run it  Enable BC on Content Servers (DPs)  Make sure Server secret key is synced  Enable BC Distributed Mode on Clients + Config  Install the free 2Pint Reporting/OSD Toolkit  Configure BITS Policy http://fearthemonkey.co.uk/how-to-configure-sccm-2012-r2-and-branchcache/  Get BranchCaching!

29. Tips & Tricks The Hash & The Cache – Injecting Stuff on the fly Get a.wim from running OS to inject Server secret key Downloading Partial Driver Store BITS & BranchCaching an Application TS BranchCache is Awesome

30. Demo Beyond Unsupported BranchCache in Overdrive

31. Tough Issues  Reporting = Solved  WinPE = Solved  Apps = Solved  Bare Metal = Solved by iPXE ( Weds 8am Session @ MMS)  BITS is Crap at BW mgmt = Solved by StifleR  Does not support O365 = Solved by StifleR’s MOM  Requires Enterprise = Well… no.  Requires Internet Explorer = Ehrm… well no.

32. Get BranchCaching! (it's not just about ConfigMgr dude..)  SharePoint - Cache it! (Cobalt is BC aware)  SMB Shares - Cache it!  Exchange - OAB sync - Cache it!  Cloud Content - Cache it!  O365 - Cache it! (well ask us about it :-) )  Any other http content - Cache it!

33. Demo Time Permitting Playing with the API

34. Evaluations: Please provide session feedback by clicking the EVAL button in the scheduler app (also download slides). One lucky winner will receive a free ticket to the next MMS! Session Title: BranchCache, BITS and DeDupe in ConfigMgr - 500 and beyond Discuss… Ask your questions-real world answers! Plenty of time to engage, share knowledge. ‘Interesting’ Question wins a beverage of your choice and a fabulous 2Pint 8GB USB Bottle Opener SPONSORS

36. V1 Hashes - Simple Segment HASH SHA-256 File 64K Block <=64K Block #ITDEVCON SHA-256

37. Getting Bigger… Every 512 block hashed (representing a 32M segment) are hashed The last segment may be less than 512 blocks Each Segment Hash is HMAC signed using a server secret key #ITDEVCON

38. House of Cards Segment HASH SHA-256 File 64K Block <=64K Block SHA-256 Inject 1 single little darn Byte at first offset Whole segment hash is invalid

39. Fingerprint Used to choose boundaries Blocks 32K – 128K Identifiers Block Hashes ID1 ID2 ID3 ID4 ID5 ID6 ID7 ID8 ID9 V2 – Pulling Tricks