Transcript Windows Server 2012 R2 Preview: Networking

Day 1
Day 2
Introducing Windows Server 2012 R2
Server Management & Automation with Windows Server 2012
R2
Server Virtualization in Windows Server 2012 R2
VDI with Windows Server 2012 R2
Cloud Optimized Networking in Windows Server 2012 R2
Access & Information Protection with Windows Server 2012 R2
Storage in Windows Server 2012 R2
Web Application & Platform with Windows Server 2012 R2
#WS2012R2JS
Hands-On Labs
DOWNLOAD
Windows Server
2012 R2 Preview
DOWNLOAD
System Center
2012 R2 Preview
aka.ms/ws2012r2
aka.ms/sc2012r2
http://www.microsoftvirtualacademy.com
System Center 2012 R2 Jumpstart
July 15th - http://aka.ms/SCR2JS
Advancing
Software Defined
Networking
Delivering
Continuously
Available
Applications
Improving
Network
Performance
Simplifying
Datacenter
Network
management
Networking in the
Hybrid Cloud
4
Advancing Software Defined Networking
Improving Network
Performance
Simplifying Datacenter
Network Management
Networking in the
Hybrid Cloud
Hyper-V Network
Virtualization
Hyper-V Extensible
Switch
SMB Direct (RDMA)
IP Address
Management (IPAM)
Cross premise
connectivity
Inbox HNV Gateway
Virtual Machine
Manager
Enhancements
vRSS
Microsoft Windows
PowerShell
Extending to Azure
Single Root I/O
Virtualization (SR-IOV)
Remote Live capture
Extending to Service
Providers
Dynamic VMQ
Network Management
using Virtual Machine
Manager
Delivering Continuously Available Applications
SMB Multichannel
Quality of Service
DHCP Failover
NIC Teaming
Network Monitoring
using
Operations Manager
5
Open, Extensible and Standards based
Hyper-V Network
Virtualization
Inbox Gateway
Hyper-V
Extensible Switch
Management
with System
Center Virtual
Machine
Manager
Built-in and production ready
Innovation in software and hardware
6
VLAN tags
Aggregation
Switches
ToR
ToR
BACKGROUND
• Network virtualization lags behind compute and storage
• Administration within the data center may be soiled
THE CHALLENGES
• Physical network configuration is not flexible
• Workloads tied to underlying hardware configurations
• Configuration changes are manual and cumbersome
• Diverse network infrastructure requires vendor-specific
management and control
• Greater VM mobility and density difficult to achieve
VMs
7
Enables
software to
dynamically
manage the
network by:
Enabling integrated policies that span physical and virtual
networks
Abstracting workloads from the physical network
Controlling datacenter traffic flow
8
Virtual Machine
• Extends virtual switch functionality by adding
switch extensions
• Provides open platform supporting third-party
plug-ins to add functionality
• Lets customers manage virtual network the
same way they would manage a physical
network
• Helps monitor the security of virtual machine
to virtual machine traffic
• Provides unified management and
enforcement of plug-ins with Virtual Machine
Manager across entire datacenter
• Includes NDIS filter drivers, WFP callout
drivers, Ingress filtering, Destination lookup
and forwarding and Egress filtering extensions
Virtual Machine
Parent Partition
VM NIC
Host NIC
VM NIC
Virtual Switch
Extension Protocol
Capture
Extensions
Extension
A
Filtering
Extensions
Extension
C
Forwarding
Extension
Extension
D
Extension Miniport
Physical NIC
Hyper-V Extensible Switch architecture
9
Virtual Machine
Build Extensions for Capturing,
Filtering & Forwarding
Key Features
•
Extension monitoring & uniqueness
•
Extensions that learn VM life cycle
•
Extensions that can veto state changes
•
Multiple extensions on same switch
Several Partner Solutions Available
•
Cisco – Nexus 1000V & UCS-VMFEX
•
NEC – ProgrammableFlow PF1000
•
5nine – Security Manager
•
InMon - SFlow
Virtual Machine
Parent Partition
VM NIC
Host NIC
VM NIC
Virtual Switch
Extension Protocol
Capture
Extensions
Extension
A
Filtering
Extensions
Extension
C
Forwarding
Extension
Extension
D
Extension Miniport
Physical NIC
Hyper-V Extensible Switch architecture
10
How network virtualization works
• Overlays multiple virtual networks on
shared physical network
Blue virtual
machine
Yellow virtual
machine
Blue network
Yellow network
• Uses industry standard General Routing
Encapsulation (NVGRE) protocol
Problems solved
• Creates VM mobility across datacenter,
hoster cloud or Azure without network
constraints
Physical server
Physical network
• Provides ability to import customer IP
addresses and network topology
• Helps remove VLAN constraints
• Helps eliminate hierarchical IP address
assignment for virtual machines
11
Blue sees
Orange sees
SQL Server
• Tenants with overlapping IP Address
10.1.1.1
range share same physical network
• Policies enforced at host level using
PowerShell or System Center Virtual
Machine Manager
Web
10.1.1.2
SQL Server
Web
10.1.1.1
10.1.1.2
10.1.1.1
192.168.1.10
10.1.1.1
192.168.1.10
10.1.1.2
192.168.2.12
10.1.1.2
192.168.2.12
What’s really happening
• DHCP servers can be part of
192.168.n.n
virtualized network to enable locally
assigned IP addresses
PROVIDER ADDRESS SPACE (PA)
192.168.1.10
• Supports guest clustering
192.168.2.12
10.1.1.1
192.168.1.10
10.1.1.1
192.168.1.10
10.1.1.1
192.168.1.10
10.1.1.1
192.168.1.10
10.1.1.2
192.168.2.12
10.1.1.2
192.168.2.12
10.1.1.2
192.168.2.12
10.1.1.2
192.168.2.12
10.1.1.1
SQL Server
10.1.1.1
SQL Server
10.1.1.2
Web
10.1.1.2
Web
CUSTOMER ADDRESS SPACE
12
Network Virtualization Packet Flow
Blue1 sending to Blue2
Hyper-V Switch
Hyper-V Switch
VSID ACL Enforcement
VSID ACL Enforcement
Network Virtualization
Network Virtualization
IP Virtualization
Policy Enforcement
Routing
IP Virtualization
Policy Enforcement
Routing
ARP TABLE
10.10.10.11
34:29:af:c7:d9:12
MACB1 -> MACB2
10.10.10.10 -> 10.10.10.11
Network Virtualization Packet Flow
Blue1 sending to Blue2
Hyper-V Switch
VSID ACL Enforcement
Hyper-V Switch
5001
MACB1 -> MACB2
10.10.10.10 -> 10.10.10.11
VSID ACL Enforcement
Network Virtualization
Network Virtualization
IP Virtualization
Policy Enforcement
Routing
IP Virtualization
Policy Enforcement
Routing
MACP1 ->
MACP2
192.168.2.10 ->
192.168.5.12
5001
MACB1 ->
MACB2
10.10.10.10 ->
10.10.10.11
Contoso
Fabrikam
Challenges
•
•
Internet
Hoster wants to provide isolated networks for tenant
VMs with integral S2S VPN and NAT
Enterprises have virtualized networks split across
different datacenters or virtualized networks (NVGRE
aware) communicating to physical networks (NVGRE
unaware)
Solution
•
Multi-tenant VPN
Gateway
•
Host Datacenter
Network Virtualization Fabric
Host
Bridge Between VM Networks
& Physical Networks
Host
•
•
•
•
Multi-tenant VPN gateway in Windows Server 2012 R2
Preview
Integral multitenant edge gateway for seamless
connectivity
Guest clustering for high availability
BGP for dynamic routes update
Encaps/Decaps NVGRE packets
Multitenant aware NAT for Internet access
What it means:
Aggregation
Switches
• Provides ability to control physical network hardware
directly from applications
• Enforces routing policies on the fly
• Requires programmable hardware that uses a standard
protocol like OpenFlow, Cisco OnePK and so on.
ToR
ToR
Challenges:
• Adds complexity to the application
• Creates challenges in heterogeneous environment
Is it production ready?
• Applicable to certain classes of applications like
Microsoft Lync, Network diagnostic tools, high fidelity
video games
VM
Application
Application
VM
• Most Line of Business applications and workloads may
not need this level of control
16
Challenges
Manage a large number of physical and virtual switches
Integrate management of physical and virtual networks
Solution
Logical Network
Organizes and simplifies network assignments for
hosts, virtual machines and services
Integrated physical and virtual switch VLAN policy
VM Network
Creation/deletion of isolated virtual network overlay
(HNV) on physical network
Challenges
Allow seamless migration of VM while maintaining network
policy
Solution
Logical Switch
Single logical entity spanning hosts
Consistent policy and configuration
Management of Hyper-V Extensible Switch
Installation and configuration of switch extensions
Configuration of network policies
Network policies automatically move with the VM
Includes 3rd party extensions
How switch management works
Standards-based CIM model
Switches running Open Management
Infrastructure (OMI)
Switch Management PowerShell
Cmdlets
Communicating using
WS-MAN
Problems solved
Common management interface
across multiple network vendors
Automate common network
management tasks
Logo Program enables customers to
find/buy switches that “just work”
OMI
OMI
OMI
Gateway appliances
OMI-based
top-of-rack switch
Hyper-V switch
extensions
Chipset
extensions
To Workload Owners
• Migrate workloads
seamlessly across
clouds
• Preserve policies,
VM settings, and IP
addresses
• Move from test to
production with
minimal network
configuration
To Enterprises
To Hosters
• Reduce Opex related
to networking
• Simplify datacenter
consolidation and
mergers and
acquisitions
• Extend datacenter
into hybrid cloud
environment without
specialized
networking gear
• Enables customers
to bring their own IP
addresses and DHCP
servers
• Realize scalable
multi-tenancy
• Simplify connectivity
to customer
datacenter
To Private/Public
Cloud Datacenter
Admins
• Provide flexible VM
placement without
reconfiguration
• Decouple server and
network admin roles
to increase agility
• Enforce unified
policy across entire
datacenter from a
single management
plane
Run services
without
interruption
Automatically
remediate issues
with no human
intervention
Quality of Service
NIC Teaming
Provide consistent
bandwidth for
services
Embrace a multivendor ecosystem
DHCP
failover
SMB
Multichannel
22
• Automatic detection and use of multiple network
connections between SMB client and server
SMB
client
• Helps server applications be resilient to network
failure
• Transparent Failover with recovery of network
failure if another connection is unavailable
SMB
server
NIC
NIC
File
copy
File
copy
• Improved throughput
• Bandwidth aggregation through NIC
Teaming
• Multiple nodes/CPUs for network
processing with RSS-capable network
adapters
NIC
NIC
• Automatic configuration with very little
administrative overhead
23
• Automatic DHCP failover based on DHCP
failover IETF spec
• Provides multi-site IP address continuity to
clients by helping eliminate single points of
failure
• Provides in-box support for failover,
without the need for clustering
• Uses a failover setup consisting of two
servers located across different geographic
locations
• Includes active/active or active/passive
behavior
• Simple provisioning and configuration of
DHCP server using PowerShell
Hot standby DHCP
failover in a huband-spoke
deployment
Load-sharing
DHCP failover in a
single site with a
single subnet
24
Runtime
bandwidth
demand (gigabits
per second)
• Helps guarantee predictable network
performance and fair sharing during congestion
• Supports bandwidth floors and bandwidth caps
• Helps enforce customer SLAs and maximum
pricing caps
• Sets QoS for virtual machine or traffic type
• Uses software built into Windows Server 2012 R2
Preview or hardware capable of Data Center
Bridging (DCB) to assign minimum QoS settings
• Supports dynamic change of QoS settings
through PowerShell without any downtime
Service
Virtual
machine
Reservation
30%
T1
4
T2
4
T3
2
Actual bandwidth
usage by service
T1
4
T2
T3
3
2
4
Storage
40%
5
5
6
Live
migration
20%
0
3
2
Cluster
Shared
Volume
10%
0.5
1
0
6
5
2
0.5
1
When
bandwidth is
available, each
service takes as
much as it can
When the link
is congested,
each service
takes its fair
share
2
When bandwidth
becomes
available, each
service takes as
much as it wants
25
• Provides network fault tolerance and
continuous availability when network adapters
fail by teaming multiple network interfaces
• Supports all vendors in-box
• Facilitates local or remote management
through Windows PowerShell or UI
• Enables teams of up to 32 network adapters
• Aggregates bandwidth from multiple network
adapters
• Includes multiple nodes: switch dependent
and independent
Virtual
adapters
Team network
adapter
Team network
adapter
 TCP streams or "flows” are
generally not continuous
 Groups of packets sent between
flows are called “flowlets”
 Dynamic load balancing detects
breaks in a flow of sufficient
length to minimize possibility
of packet reordering
 Flows can be moved to other
team members on flowlet
boundaries to rebalance traffic
 Dynamic LBFO maximizes
resource utilization in teamed
NICs by balancing loads across
all NIC team members
 Ideal when there are fewer
VMs per team
Virtual
adapters
Team network
adapter
Team network
adapter
28
Without
With RDMA
RDMA
File Client
File Server
App
Buffer
• Higher performance through offloading of
network I/O processing onto network adapter
• Higher throughput with low latency and ability
to take advantage of high-speed networks
(such as InfiniBand and iWARP)
• Remote storage at the speed of direct storage
SMB
Buffer
SMB
Buffer
OS
Buffer
OS
Buffer
Driver
Buffer
Driver
Buffer
Adapter
Buffer
rNIC
NIC
iWARP
InfiniBand
rNIC
NIC
• Transfer rate of around 50 Gbps on a single
NIC port
• Compatible with SMB Multichannel for load
balancing and failover
Adapter
Buffer
29
Increased efficiency of network
processing on Hyper-V hosts
Without VMQ
•
Hyper-V Virtual Switch is responsible for
routing & sorting packets for VMs
•
This leads to increased CPU processing, all
focused on CPU0
With VMQ
•
Physical NIC creates virtual network
queues for each VM to reduce host CPU
With Dynamic VMQ
•
Processor cores dynamically allocated for
a better spread of network traffic
processing
Hyper-V Host
Hyper-V Host
Hyper-V Host
• vRSS provides near line rate to a VM on
existing hardware, making it possible to
virtualize traditionally network intensive
physical workloads
• Extends the RSS functionality built into
Windows Server 2012
• Maximizes resource utilization by
spreading VM traffic across multiple
virtual processors
• Helps virtualized systems reach higher
speeds with 40 Gbps and 100 Gbps NICs
• Requires no hardware upgrade and
works with any NICs that support RSS
vProc
vProc
vProc
vProc
vNIC
Node 2
Node 0
Node 1
0
1
2
3
0
1
2
3
Incoming
packets
Node 3
Host
Virtual Machine
• VM traffic bypasses virtual switch and performs I/O
directly to NIC
• Ideal for high I/O workloads that do not require port
policies, QoS, or network virtualization enforced at the
end host virtual switch
VM Network Stack
Synthetic NIC
Virtual Function
• Most 10Gbps and in-box NICs SR-IOV capable
Benefits
• Maximizes use of host system processors and memory
Hyper-V
Extensible Switch
• Reduces host CPU overhead for processing network
traffic (by up to 50%)
• Reduces network latency (by up to 50%)
• Provides higher network throughput (by up to 30%)
SR-IOV NIC
VF
VF
VF
• Full support for Live Migration
32
Provide an
easy-to-use,
robust automation
framework
Manage IP
address space and
consolidate
external tools
IP Address
Management
Resource
Metering
Monitoring with Operations Manager
Simplify
management in
multisite
environments
Monitor
resource usage
Management
with Virtual
Machine
Manager
Windows
PowerShell
33
IPAM distributed architecture
Domain
• Inbox feature for integrated management of IP
addresses, domain names, and device identities
europe.corp.woodbridge.com
• Tightly integrates with Microsoft DNS and
DHCP servers
• Provides custom IP address space display,
reporting, and management
IPAM Server
(UK)
IPAM server
(Redmond)
Site: UK
Branch office
• Audits server configuration changes and tracks
IP address use
• Migrates IP address data from spreadsheets or
other tools
DHCP, DNS, DC,
and NPS servers
Domain
DHCP, DNS, DC,
and NPS servers
• Monitors and manages specific scenario-based
DHCP and DNS services
fareast.corp.woodbridge.com
IPAM Server
(Hyderabad)
Site: Redmond
Head office
Site: Hyderabad
Branch office
DHCP, DNS, DC,
and NPS servers
IPAM Server
(Bangalore)
DHCP, DNS, DC,
and NPS servers
Site: Bangalore
Branch office
34
Network Administrator
Fabric Administrator
• Manages virtual address space in addition to
physical address space
System Administrator
Forensics Investigator
• Imports and exports network configurations
automatically through plugin for System Center
Virtual Machine Manager
• Enables synchronization of Active Directory
Sites and subnets information with IPAM
Security Groups
Data collection tasks
• Supports large scale enterprise deployments
• Uses SQL Server to store IP address information
• Lets admins define user roles, access scope and
access policy through role-based access control
35
Comprehensive coverage with more than 400 cmdlets related to
networking
Remote machine management support
Integrated object model
36
10
15
25
20
5
30
0
Benefits
Resource Pool Internet
Resource Metering
10
50
45
40
35
30
25
20
15
55
5
0
Resource pool
Internet
Customer 2
Resource pool
Internet
Customer 1
• Tracks and meters resource
• Average CPU use
usage and provides
infrastructure to build
chargeback solutions
• Average memory use
• Minimum memory use
• Tracks resource usage of
• Maximum memory use
individual virtual machines
or virtual machine pools
• Maximum disk allocation
• Incoming network traffic
• Metering not affected by
virtual machine movement
• Uses active control lists
(ACLs) from network
metering port
• Provides complete Windows
PowerShell support
Metrics
• Outgoing network traffic
20
45
30
0
Virtual Machine
Resource Metering
25
10
40
0
A two-tenant environment built with
Hyper-V in Windows Server 2012 R2
Preview
• Storage IOPS
37
• Remote monitoring of network traffic on a
in Windows Server 2012 is not simple
• Windows Server 2012 R2 Preview makes it
easy to mirror and capture network traffic
for remote and local viewing
• Provides integrated GUI experience
with Message Analyzer
• Collects offline traffic captures from
remote computers
• Provides filters to select packets by IP
addresses and VMs
• Captures ETW events for remote and
local viewing
Remote Live Monitoring provides remote packet and
ETW event capture from any host in the datacenter,
enabling low-touch diagnostics at high scale
WMI to configure the filters and truncation
WMI starts/stops the session
Truncated network traffic redirected
ETW events
Windows Server
2012 R2
Server or client with
Microsoft Message
Analyzer
Cross-premises connectivity
Inbox Gateway to extend beyond private cloud
Extending your private cloud to Azure
Seamlessly extend Datacenter to Azure
Extending your private cloud to hosters
39
VPN site-to-site functionality in
remote access:
• Provides cross-premises connectivity
between enterprises and hosting service
providers
• Connects to private subnets in hosted
cloud networks
• Provides connectivity among
geographically separate enterprises
Contoso
private
cloud
Woodgrove
private
cloud
VPN site-to-site tunnel
IKEv2-IPsec
Contoso
London
branch
VPN site-to-site tunnel
IKEv2-IPsec
Contoso
New York Subnet4
branch
Subnet3
Subnet1
Subnet2
Subnet1
Subnet2
Hosted Cloud
VPN site-to-site tunnel
IKEv2-IPsec
Industry standard
IKEv2-IPsec router
Woodgrove
Brazilian
branch
Subnet3
Subnet4
Windows Server 2012 R2
Preview remote access
site-to-site VPN server
40
S2S Tunnel
S2S Tunnel
 Includes Site-to-site (S2S)
Blue
GW
VPN as part of Remote
Access Server
 Requires Windows Network
Virtualization
 Needs one VM per tenant for
the gateway
S2S Tunnel
Orange
Corp site1
Orange
Corp site2
Green
GW
S2S Tunnel
S2S Tunnel
Orange
GW
Orange Virtual
Network
BGP
 Provides multitenant S2S
gateway
 Includes guest clustering for
HA
 Uses BGP for dynamic routes
update
 Provides multitenant-aware
NAT for Internet access
Active-Standby
S2S Tunnel
Orange
Corp site1
Orange Virtual
Network
Orange
Corp site2
Virtual Network
 Extend your datacenter
to Azure by creating VMs
in private networks
 Connect individual
computers to Azure VMs
and virtual networks using
Point to Site connectivity
without VPN device
 Windows inbox gateway to
connect virtual networks in
private cloud and Azure
Site-to-Site
VPN
Subnet 1
Subnet 2
Subnet 3
DNS
Server
VPN
Gateway
On premises
Your datacenter
VPN
Device
Individual computers
behind corporate
firewall
Remote workers
43
Advancing
Software Defined
Networking
Delivering
Continuously
Available
Applications
Improving
Network
Performance
Simplifying
Datacenter
Network
management
Networking in the
Hybrid Cloud
44
#WS2012R2JS
Hands-On Labs
DOWNLOAD
Windows Server
2012 R2 Preview
DOWNLOAD
System Center
2012 R2 Preview
aka.ms/ws2012r2
aka.ms/sc2012r2
http://www.microsoftvirtualacademy.com
System Center 2012 R2 Jumpstart
July 15th - http://aka.ms/SCR2JS