Upload
others
View
1
Download
0
Embed Size (px)
Citation preview
Introduction
Make it realSupport for important business workloads through scale and performance improvements
Increased business flexibility with virtual machine mobility
Continuous services to help meet availability and service-level agreements
Open and extensible platform for performance management and automation
Delivery of shared and multitenant environments with isolation
Get started
Beyond virtualizationScale and secure workloads, cost-effectively build a private
cloud, and securely connect to cloud services
Every app, any cloudBuild on an open and scalable web platform that supports
applications across premises
Modern workstyle,
enabledSupport a mobile and flexible work style
The power of many
servers, the simplicity
of one
Efficiently manage infrastructure while maximizing uptime and
minimizing failures and downtime
CHALLENGES
Bigger, faster, and more available virtual machines
Greater flexibility and agility to deliver solutions
Ability to handle complex storage and networking
requests
Removal of limits in virtual machine mobility
Support for new hardware technologies
Keep services up and running, and meet SLAs
Decrease capital and operational costs of infrastructure
Use bigger, more capable servers more effectively
Protect and use existing investments and infrastructure
Maintain separation of resources in multitenant
environments
NEEDS
Dynamic memory
increase assigned to
virtual machines to
increase capacity with
no downtime
Network
virtualization for
multitenancy and IP
portability
Larger virtual
machines to support
increased workloads
Open, extensible
switch to help
support security and
management needs
Run more
demanding
applications with
better performance
Take advantage of
newer hardware,
while still using
existing hardware
to maximum
advantage
Bigger, faster virtual machines
Hardware
offloading
Guest applications
take advantage of
improved Non-
Uniform Memory
Access (NUMA)
support
SCALE AND PERFORMANCE
System Resource
MAXIMUM NUMBER Improvement
factorWindows 2008 R2 Windows Server 2012
Host Logical processors on
hardware64 320 5×
Physical memory 1 TB 4 TB 4×
Virtual processors per host 512 2,048 4×
Virtual
machine
Virtual processors per virtual
machine4 64 16×
Memory per virtual machine 64 GB 1 TB 16×
Active virtual machines 384 1,024 2.7×
Cluster Nodes 16 64 4×
Virtual machines 1,000 8,000 8×
Features• Storage capacity up to 64 TBs
• Corruption protection during power failures
• Optimal structure alignment for large-sector disks
Benefits• Increases storage capacity
• Protects data
• Helps to ensure quality performance on large-sector disks
VHDX
SCALE AND PERFORMANCE
Large allocations and 1 MB aligned
Header region
Data region (large allocations and 1 MB aligned)
Metadata region (small allocations and unaligned)
Intent logBlock Allocation
Table (BAT)
Metadata table
User data blocks
Sector bitmap blocks
User metadata
File metadataHeader
Capabilities• Improved performance of virtual hard disks
on 512e disks
• Ability to host virtual hard disks on native 4 KB disks
Benefits• Reduces impact of 512e disks on virtual
hard disk stack
• Workloads complete more quickly
Virtual hard disk 4 KB block (blue) not
aligned with physical 4 KB boundary
SCALE AND PERFORMANCE
Physical sector 0 Physical sector 1
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15Logical sector
Sector bitmap
SCALE AND PERFORMANCE
• Projects NUMA topology onto a virtual machine
• Allows guest operating systems and applications to make intelligent NUMA decisions
• Aligns guest NUMA nodes with host resources
Non-Uniform Memory Access
Guest NUMA topology by default
matches host NUMA topology
vNUMA node A vNUMA node B vNUMA node A vNUMA node B
NUMA node 1 NUMA node 2 NUMA node 3 NUMA node 4
Live migration maintaining
Fibre Channel connectivity
SCALE AND PERFORMANCE
Hyper-V host 1 Hyper-V host 2
Worldwide Name Set B
Worldwide Name Set A
Worldwide Name Set B
• Unmediated access to a storage area network (SAN)
• Hardware-based I/O path to virtual hard disk stack
• N_Port ID Virtualization (NPIV) support
• Single Hyper-V host connected to different SANs
• Up to four Virtual Fibre Channel adapters on a virtual machine
• Multipath I/O (MPIO) functionality
• Live migration
Access Fibre Channel SAN
data from a virtual machine
Worldwide Name Set A
Dynamic memory
increase assigned to
virtual machines to
increase capacity with
no downtime
Network
virtualization for
multitenancy and IP
portability
Larger virtual
machines to support
increased workloads
Open, extensible
switch to help
support security and
management needs
Manage virtual machines independently
from underlying infrastructure
Handle changing needs on demand
Live migration
within a cluster
Shared-nothing live
migration
Hyper-V
Replica
Live migration of
storage
Improvements• Faster and simultaneous migration
• Live migration outside a clustered environment
• Store virtual machines on a File Share
VM VM
Live migration setup
SMB network storage
IP connection
Configuration data
Memory pages transferred
Memory content
MEM
ORY
MEM
ORY
Modified pages transferred
Modified memory pages
Storage handle moved
VIRTUAL MACHINE MOBILITY
Live migration based on server message block (SMB) share
VM
Computer running Hyper-V
Target deviceSource device
VIRTUAL MACHINE MOBILITY
Benefits• Manage storage in a cloud environment
with greater flexibility and control
• Move storage with no downtime
• Update physical storage available to a virtual machine (such as SMB-based storage)
• Windows PowerShell cmdlets
Live migration of storageMove virtual hard disks attached to a running virtual machine
Reads and writes go to the source VHDDisk contents are copied to new
destination VHDDisk writes are mirrored; outstanding
changes are replicatedReads and writes go to new
destination VHD
Virtual machine
Destination Hyper-V
Virtualmachine
Target deviceSource device
Virtualmachine
Source Hyper-V
IP connection
Configuration data
VIRTUAL MACHINE MOBILITY
Benefits• Increase flexibility of virtual machine
placement
• Increase administrator efficiency
• Reduce downtime for migrations across cluster boundaries
Shared-nothing live migrationReads and writes go to the
source VHDReads and writes go to the
source VHD. Live Migration Begins
Live Migration
Destination Hyper-V
Virtualmachine
Target deviceSource device
Virtualmachine
Source Hyper-V
IP connection
VIRTUAL MACHINE MOBILITY
Benefits• Increase flexibility of virtual machine
placement
• Increase administrator efficiency
• Reduce downtime for migrations across cluster boundaries
Shared-nothing live migrationReads and writes go to the
source VHDReads and writes go to the
source VHD. Live Migration BeginsDisk contents are copied to new
destination VHD
Live Migration
Destination Hyper-V
Virtualmachine
Target deviceSource device
Virtualmachine
Source Hyper-V
IP connection
VIRTUAL MACHINE MOBILITY
Benefits• Increase flexibility of virtual machine
placement
• Increase administrator efficiency
• Reduce downtime for migrations across cluster boundaries
Shared-nothing live migrationReads and writes go to the
source VHDReads and writes go to the
source VHD. Live Migration BeginsDisk contents are copied to new
destination VHDDisk writes are mirrored; outstanding
changes are replicated
Live Migration
Destination Hyper-V
Virtualmachine
Target deviceSource device
Virtualmachine
Source Hyper-V
IP connection
Modified memory pages
VIRTUAL MACHINE MOBILITY
Benefits• Increase flexibility of virtual machine
placement
• Increase administrator efficiency
• Reduce downtime for migrations across cluster boundaries
Shared-nothing live migrationReads and writes go to the
source VHDReads and writes go to the
source VHD. Live Migration BeginsDisk contents are copied to new
destination VHDDisk writes are mirrored; outstanding
changes are replicated
Live Migration
MEM
ORY
MEM
ORY
Live Migration Continues
Destination Hyper-V
Virtualmachine
Target deviceSource device
VIRTUAL MACHINE MOBILITY
Benefits• Increase flexibility of virtual machine
placement
• Increase administrator efficiency
• Reduce downtime for migrations across cluster boundaries
Shared-nothing live migrationReads and writes go to the
source VHDReads and writes go to the
source VHD. Live Migration BeginsDisk contents are copied to new
destination VHDDisk writes are mirrored; outstanding
changes are replicatedLive Migration ContinuesLive Migration Completes
Benefits• Affordable in-box business continuity and
disaster recovery
• Failure recovery in minutes
• More secure replication across network
• No need for storage arrays
• No need for other software replication technologies
• Automatic handling of live migration
• Simpler configuration and management
New featureReplicate Hyper-V virtual machines from a primary site to a replica site
VIRTUAL MACHINE MOBILITY
Hyper-V role and tools
Hyper-V cmdlets
Hyper-V PS integrated UI
Hyper-V Management Module tracks and replicates changes for
each virtual machine
Hyper-V role and tools
Hyper-V cmdlets
Hyper-V PS integrated UI
Hyper-V Management Module receives and applies the changes to
the replica virtual machine
Primary site
CRM virtual machine
SQL virtual machine
SharePoint virtual machine
Exchange virtual machineIIS virtual machine Exchange
replica virtual
machine
CRM replicavirtual
machine
Replicate over WAN link
SMB file share
Send/receive replica traffic
SAN
R1
R2
R3P1 P2
Replica site
Dynamic memory
increase assigned to
virtual machines to
increase capacity with
no downtime
Network
virtualization for
multitenancy and IP
portability
Larger virtual
machines to support
increased workloads
Open, extensible
switch to help
support security and
management needs
Keep virtual
machines up and
running
Minimize downtime
due to
infrastructure
changes
Modify
virtual machine
configuration
without downtime
Ensure resource
availability in
shared
environments
Clustering
enhancements
Dynamic Memory
improvements NIC Teaming
Quality of Service
(QoS) minimum
bandwidth
Enable high-availability
solutions for many
workloads
Protect against:
• Application and service failure
• System and hardware failure
• Site failure (natural disaster, power
outages, or connectivity outages)
Increase availability and enable access to server-based applications
during planned and unplanned downtime
CONTINUOUS SERVICES
Benefits
Guest clustering through Fibre
Channel• Connects to Fibre Channel directly from
within virtual machines
• Virtualizes workloads that:
– Use direct access to Fibre Channel storage
– Cluster guest operating systems over Fibre Channel
Clustered live migration enhancements
Uses higher network bandwidths (up to
10 GB) to complete migrations faster
Encrypted cluster volumes
Uses BitLocker Drive Encryption to enable
better physical security for deployments
outside of secure datacenters
Cluster Shared Volume (CSV) 2.0 • Simplifies the configuration and operation of
virtual machines
• Provides greater security and performance
• Integrates with storage arrays for out-of-box
replication and hardware snapshots
CONTINUOUS SERVICES
Features
Transparent failover
Moves file shares between nodes with little interruption to server applications, such as:
• Configuration files
• Virtual hard disk files
• Snapshots in file shares over the SMB3 protocol
Hyper-V application monitoring• Uses Hyper-V and failover clustering to bring higher availability to workloads
that do not officially support clustering
• Monitors services and event logs inside the virtual machine
• Determines health of the virtual machine’s key services
CONTINUOUS SERVICES
Features
Virtual machine failover
prioritization
• Lets you configure virtual machine priorities
• Controls the order in which virtual machines
fail over or start
Affinity (and anti-affinity)
virtual machine rules
• Lets you configure partnered
virtual machines to migrate
simultaneously during failover
Example: A Microsoft SharePoint virtual machine and
partnered Microsoft SQL Server virtual machine can be
configured to always fail over together to the same node.
• Allows you to specify that two
virtual machines cannot coexist on
the same node in a failover
scenario (anti-affinity)
In-box live migration queuing
Lets you perform large, multiselect actions to
queue live migrations of multiple virtual
machines
CONTINUOUS SERVICES
Features
Relative minimum bandwidth
Strict minimum bandwidth
Bandwidth
oversubscription
CONTINUOUS SERVICES
Features• Establishes a bandwidth floor
• Assigns specified bandwidth for each type of traffic
• Helps to ensure fair sharing during congestion
• Can exceed quota with no congestion
Two mechanisms• Enhanced packet scheduler (software)
• Network adapter with DCB support (hardware)
Normal priority
High priority
Critical
Hyper-V Extensible Switch
W=1 W=2 W=5
Bronze tenant
Silver tenant
Gold tenant
Hyper-V Extensible Switch
100 MB 200 MB 500 MB
1 Gbps
Gold tenant
Gold tenant
Gold tenant
Hyper-V Extensible Switch
500 MB 500 MB 500 MB
1 Gbps
NIC Teaming
1 Gbps
General benefits • Needs fewer expensive network adapters
• Makes best use of 10-GbE hardware
For public cloud hosting providers • Manages performance levels for SLAs
• Delivers minimal impact or compromise in shared infrastructure
CONTINUOUS SERVICES
Runtime bandwidth
demand (gigabits
per second)
Service Reservation T1 T2 T3
Virtual
machine30% 4 4 2
Storage 40% 5 5 6
Live
migration20% 0 3 2
Cluster
Shared
Volume
10% 0.5 1 0
T1
4
5
0.5
T3
2
6
2
T2
3
4
1
2
Actual bandwidth
usage by each service
When
bandwidth is
available, each
service takes as
much as it can
When the link
is congested,
each service
takes its fair
share
When bandwidth
becomes
available, each
service takes as
much as it wants
VM1
Maximummemory
CONTINUOUS SERVICES
Hyper-V
Physicalmemory
pool
Minimummemory
Maximummemory Memory in use
Physicalmemory
pool
Memory in use
Physicalmemory
pool
Administrator can increase maximum memory without a restart
Dynamic Memory • Introduced in Windows Server 2008 R2 SP1
• Reallocates memory automatically among running virtual machines
Windows Server 2012 improvements• Minimum memory
• Hyper-V smart paging
• Memory ballooning
• Runtime configuration
Hyper-V
VM1
Maximummemory
Virtual machine starting with
Hyper-V smart paging
CONTINUOUS SERVICES
Minimummemory
VMn
Minimummemory
Maximummemory
VM2
Maximummemory
Minimummemory
Physicalmemory
pool
Physicalmemory
pool
Physicalmemory
pool
Startup increases
memory in use
Paging file provides additional memory for startup
Benefits• Higher consolidation numbers
• Improved reliability of Hyper-V operations
• Ability to increase maximum memory configuration with minimal downtime
Removing paged memory after
virtual machine restart
Memory reclaimed after startup
Physicalmemory
pool
Memory in use
after startup
• Detects and fixes problems
• Does not require the virtual machine to be exported
• Allows a virtual machine to be copied to a USB flash drive
• Moves virtual machines more easily and reliably
• Uses Windows PowerShell cmdlets for automation
Import wizardSimpler, better way to import virtual machines
User selects the virtual machine to import/register
User selectsin-place registration
User selectsremote registration
Copies of the configuration file and saved state are
copied to the destination
Validation occurs on the new host
If required, “fix it” wizard is used for repair operations
Virtual machine is ready to start up
CONTINUOUS SERVICES
BENEFITS
Snapshot data stored in .avhd files
.avhd disk can be merged into the parent while the
virtual machine continues to run
I/O suspended to a small range while data in the range
is processed
At completion, online merge fixes merged disks and
closes files
Update parent virtual hard disks while the virtual
machine is still running
HOW SNAPSHOTS WORK
CONTINUOUS SERVICES
What is NIC Teaming?• Multiple parallel network connections
• Increases throughput
• Provides redundancy in case of link failure
NIC Teaming in a Hyper-V environment• Uses virtual network adapters
• Can connect to more than one virtual switch
• Maintains connectivity if one switch
disconnects
• Can support up to 32 network adapters in a
team (Example: SR-IOV)
• Higher reliability against failure
• Better throughput
Benefits
Management
• Windows PowerShell
• Configuration UI for NIC Teaming Server Manager
CONTINUOUS SERVICES
• Multiple modes: switch dependent and independent
• Hashing modes: port and 4-tuple
• Active/active and active/standby
CONTINUOUS SERVICES
Virtual adapters
Team network adapter
Team network adapter
Dynamic memory
increase assigned to
virtual machines to
increase capacity with
no downtime
Network
virtualization for
multitenancy and IP
portability
Larger virtual
machines to support
increased workloads
Open, extensible
switch to help
support security and
management needs
Use partner
extensions or
create your own to
support security
and management
needs
Use existing
management tools
to handle your
multiserver
virtualization
environment
Hyper-V Extensible
Switch
Windows
PowerShell
Integration with
Microsoft System
Center
Hardware
offloading
Parent Partition
Other featuresExtension monitoring
Extension uniqueness
Extensions that learn virtual machine life cycle
Extensions that can veto state changes
Multiple extensions on same switch
Two platforms for extensions• Network Device Interface Specification
(NDIS) filter drivers
• Windows Filtering Platform (WFP) callout drivers
You can extend or replace
• NDIS filter drivers
• WFP callout drivers
• Ingress filtering
• Destination lookup and forwarding
• Egress filtering
OPEN AND EXTENSIBLE
Hyper-V Extensible Switch architecture
Extension C
Extension D
Extension A
Extension Miniport
Extension Protocol
Virtual Switch
Physical NIC
Virtual Machine
Host NIC VM NIC
Virtual Machine
VM NIC
Capture Extensions
Filtering Extensions
Forwarding Extension
OPEN AND EXTENSIBLE
Extension Purpose Potential examples Extensible component
Network packet inspectionInspecting network packets, but not
altering them
sFlow and network
monitoringNDIS filter driver
Network packet filterInjecting, modifying, and dropping
network packetsSecurity NDIS filter driver
Network forwardingThird-party forwarding that bypasses
default forwarding
OpenFlow, Virtual Ethernet
Port Aggregator (VEPA),
and proprietary network
fabrics
NDIS filter driver
Firewall/intrusion detection
Filtering and modifying TCP/IP
packets, monitoring or authorizing
connections, filtering IPsec-
protected traffic, and filtering RPCs
Virtual firewall and
connection monitoringWFP callout driver
OPEN AND EXTENSIBLE
Benefits• Rapid virtual machine provisioning and
migration
• Faster transfers on large files
• Minimized latency
• Maximized array throughput
• Less CPU and network use
• Performance not limited by network throughput or server use
• Improved datacenter capacity and scale
• Automation
Offloaded Data Transfer (ODX)Token-based data transfer between intelligent storage arrays
Token-based copy operation
Token
Offload writeTokenOffload read Token
Intelligent storage array
Actual data transfer
OPEN AND EXTENSIBLE
• Increases network throughput
• Reduces network latency
• Reduces host CPU overhead for processing network traffic
Benefits• Maximizes use of host system processors
and memory
• Handles the most demanding workloads
Single Root I/O Virtualization
(SR-IOV)
Virtual machine
Network stack
Software NIC Virtual function (VF)
Hyper-V Extensible Switch
SR-IOV network adapter VF VF VF
More than 150 cmdlets
Designed for IT pros
Task-oriented interface
Consistent cmdlet nouns
OPEN AND EXTENSIBLE
Partner enablementMultitenancyTenant administrator
Virtual machine network isolation
Service deployment
Performance and scaleWindows Server 2012
OPEN AND EXTENSIBLE
Dynamic memory
increase assigned to
virtual machines to
increase capacity with
no downtime
Network
virtualization for
multitenancy and IP
portability
Larger virtual
machines to support
increased workloads
Open, extensible
switch to help
support security and
management needs
Track resource use
for knowledge and
reporting
Connect on-
premises networks
with off-site
networks
Have multiple customers and
divisions with same subnets
without IP address conflictsNetwork
virtualization
Resource Metering
IP portability
Benefits• Layer 2 virtual interface
• Managed programmatically
• Extensible by partners or customers
New featureHandles network traffic among virtual machines, external network, and host operating system
ISOLATION AND MULTITENANCY
Virtual machine
Networkapplication
Virtual network adapter
Hyper–V host
Hyper-VExtensible Switch
Physical networkadapter
Physical switch
Virtual machine
Networkapplication
Virtual networkadapter
Virtual machine
Networkapplication
Virtual networkadapter
ISOLATION AND MULTITENANCY
• Isolate some virtual machines from others in your datacenter
• Create community groups of virtual machines that can exchange data packets
Private virtual LAN (PVLAN)
Example PVLAN:
‒ Primary VLAN ID is 2
‒ Secondary VLAN IDs are 4 and 5
NIC
PVLAN Port types:
Isolated
Community
Promiscuous
Trunk mode NIC
Guest OS 1 10.0.0.1
Guest OS 2 10.0.0.2
Guest OS 3 10.0.0.3
Guest OS 4 10.0.0.4
Guest OS 5 10.0.0.5
2, (4) 2 , (4) 2, (5) 2, (5)
2, (4, 5)
2, (5)
How network virtualization works• Two IP addresses for each virtual machine
• General Routing Encapsulation (GRE)
• IP address rewrite
• Policy management server
Problems solved• Removes VLAN constraints
• Helps eliminate hierarchical IP address assignment for virtual machines
ISOLATION AND MULTITENANCY
Physical server Physical network
Blue virtual
machine
Pink virtual
machine Blue network Pink network
Benefits
Requires no upgrade of network adapters, switches, or network appliances
Can be deployed today without sacrificing performance
How IP address rewrite works
Maps each Customer Address (CA) to a unique Provider Address (PA)
Sends information in regular TCP/IP packets on the wire
ISOLATION AND MULTITENANCY
Blue Corp
Pink Corp
Policy settings
Customer Address
Provider Address
10.1.1.1 192.168.1.10
10.1.1.2 192.168.1.12
Customer Address
Provider Address
10.1.1.1 192.168.1.11
10.1.1.2 192.168.1.13
192.168.10 192.168.11 192.168.12 192.168.13
10.1.1.1 10.1.1.1 10.1.1.2 10.1.1.2
Customer address spaces
Datacenter
network
Features
• Uses resource pools
• Compatible with all Hyper-V operations
• Unaffected by virtual machine movement
• Uses Network Metering Port ACLs
Benefits of Resource Metering
• Easier to track virtual machine use
• Can be used to aggregate data for multiple virtual machines
• Can be used to build accurate lookback and chargeback solutions
• Easier to obtain resource use data
MetricsAverage CPU use
Average memory use
Minimum memory use
Maximum memory use
Maximum disk allocation
Incoming network traffic
Outgoing network traffic
ISOLATION AND MULTITENANCY
A two-tenant environment built with Hyper-V in Windows Server 2012
Virtual Machine Resource Metering
20 10
Resource Pool Internet Resource Metering
10 5
3045 2540
Resource PoolInternetCustomer 2
30 55
Resource PoolInternetCustomer 1
0
0 0
0
1015202530354045505152025
BENEFITS
ARP spoofing protection
DHCP guard protection
Virtual port ACLs
Trunk mode to virtual machines
Monitoring
Windows PowerShell | Windows Management
Instrumentation (WMI)
Enhanced security and isolation
Manageability
Isolation of customers’ networks from one another
No need to set up and maintain VLANs
Protection against malicious data interception
OTHER TOOLS
ISOLATION AND MULTITENANCY
Dynamic memory
increase assigned to
virtual machines to
increase capacity with
no downtime
Network
virtualization for
multitenancy and IP
portability
Larger virtual
machines to support
increased workloads
Open, extensible
switch to help
support security and
management needs
VIRTUAL MACHINE MOBILITY
CONTINUOUS SERVICESISOLATION AND MULTITENANCY
SCALE AND PERFORMANCE OPEN AND EXTENSIBLE
Get the evaluationMicrosoft Server and Cloud Platform:
http://www.microsoft.com/en-us/server-cloud/windows-
server/2012-default.aspx
Microsoft Learning:
http://www.microsoft.com/learning/
Microsoft Virtual Academy:
http://www.microsoftvirtualacademy.com
Get certified
Get trained