SCIM200: Server & Cloud Infrastructure and Management Kickoff

Download Report

Transcript SCIM200: Server & Cloud Infrastructure and Management Kickoff

Brian Lauge Pedersen
Senior DataCenter
Technology Specialist
Microsoft Danmark
Johnnie Krewald
Direktør
solvo it
Windows Server 2012: Cloud Optimize Your IT
Beyond
Virtualization
The Power of Many Every App,
Servers, the
Any Cloud
Simplicity of One
Modern Workstyle,
Enabled
Microsoft Cloud Datacenters
Windows Server 2012
32 virtual processors per VM
1 TB virtual machine memory
New 64TB VHDX format
Native 4k disk support
Hyper-V Replica
Hyper-V virtual fiber channel
Live storage migration
Windows NIC teaming
Concurrent live migration
Support for AES/NI
Support for up to 63 nodes per cluster
Support for 4000 VMs per cluster
Hyper-V support for up to 2 TB of physical memory
Hyper-V intelligent second level paging
Live VHD merge
Cluster shared volumes v2
SMB 2 Support
RDMA support in SMB
Scale-out file server
Multi-channel SMB
SRIOV Networking
Thousands of PowerShell commands
Virtual NIC monitor mode
Rest APIs for PowerShell commands
150 Hyper-V PowerShell commands
Storage PowerShell
Network PowerShell
Multi-Tenancy, Port ACLs / Firewall
Storage metering
Storage Spaces
SMI-S support inbox
Virtual NUMA support
CPU metering
Network metering
Memory metering
RemoteFX
Beyond virtualization
Basic server virtualization technology helps
achieve cost savings and operational efficiencies
Let’s go beyond basic
virtualization.
Create more dynamic
platforms to:
• Build private clouds.
• Create more flexible virtualization
solutions on site to support core line of
business applications and high
availability solutions.
9
Multitenant security and isolation
Hyper-V Extensible Switch
• New feature
• Handles network traffic between:
– Virtual machines
– The external network
– The host operating system
NIC = network adapter
• Layer-2 virtual interface
• Programmatically managed
• Extensible
11
Multitenant security and isolation
Private virtual LAN (PVLAN)
• Isolate virtual machines from other
virtual machines in your data center.
• Create community groups of virtual
machines that can exchange data
packets.
Example PVLAN:
‒ Primary VLAN ID is 2
‒ Secondary VLAN IDs are 4 and 5
12
Multitenant security and isolation
Other tools
Benefits
• ARP spoofing protection
• Enhanced security and isolation
• DHCP guard protection
• Manageability
• Virtual port ACLs
• Isolation of customers’ networks from
one another
• Trunk mode to virtual machines
• Monitoring
• Windows PowerShell/WMI
• No need to set up and maintain VLANs
• Protection against malicious data
interception
13
Extending the Hyper-V Extensible Switch for new capabilities
Two platforms for extensions:
• NDIS filter drivers
• WFP callout drivers
You can extend or replace:
• Ingress filtering
• Destination lookup and forwarding
• Egress filtering
Other features:
• Extension monitoring
• Extension uniqueness
• Extensions that learn virtual machine
life cycle
• Extensions that can veto state changes
• Multiple extensions on same switch
Architecture of the Hyper-V Extensible Switch
14
Hyper-V Extensible Switch extension types
Extension
Purpose
Network Packet Inspection
Inspecting network packets, but not
altering them
sFlow and network monitoring
NDIS filter driver
Network Packet Filter
Injecting, modifying, and dropping
network packets
Security
NDIS filter driver
Network Forwarding
Third-party forwarding that
bypasses default forwarding
OpenFlow, Virtual Ethernet Port
Aggregator (VEPA), and proprietary
network fabrics
NDIS filter driver
Filtering and modifying TCP/IP
packets, monitoring or authorizing
connections, filtering IPsecprotected traffic, and filtering RPCs
Virtual firewall and connection
monitoring
WFP callout driver
Firewall/Intrusion Detection
Potential Examples
Extensible component
15
Scale beyond VLANs with Hyper-V network virtualization
How network virtualization works:
• Two IP addresses for each virtual
machine
• General Routing Encapsulation (GRE)
• IP address rewrite
• Policy management server
Problems solved:
• Removes VLAN constraints.
• Eliminates hierarchical IP address
assignment for virtual machines.
16
IP address rewrite
How IP address rewrite works
Benefits
• Each Customer Address (CA) is mapped to a unique
Provider Address (PA).
• Requires no upgrade of network adapters, switches,
or network appliances
• Information is sent in regular TCP/IP packets
on the wire.
• Can be deployed today without sacrificing
performance
17
Network virtualization example
18
NIC Teaming
What is NIC Teaming?
Benefits
• Multiple parallel network connections
• Higher reliability against failure
• Increase throughput
• Better throughput
• Provides redundancy in case of link failure
NIC Teaming in a Hyper-V environment
Management
• Uses virtual network adapters
• Windows PowerShell
• Can connect to more than one virtual switch
• NIC Teaming Server Manager configuration UI
• Is designed to maintain connectivity if one switch
disconnects
• Can support up to 32 network adapters in a team
Example: SR-IOV
19


Server manager
NIC Teaming
Benefits of Hyper-V network virtualization
Tenant network
migration to the
cloud without
reconfiguration
and without
compromising
isolation
Tenant virtual
machine
deployment
anywhere in the
data center
Simplified
network and
improved
server/network
resource use
No new hardware
(servers, switches,
appliances) needed
to help achieve
maximum
performance
Full management
through Windows
PowerShell and
WMI
21
Migrate virtual machines without downtime
Live migration setup
Memory page transferred
Modified pages transferred
Storage handle moved
Improvements
• Faster migration and simultaneous
migration
• Live migration outside a clustered
environment
SMB-share-based live migration
Migrate virtual machines without downtime
Benefits
• Increase flexibility of virtual machine placement
• Increase administrator efficiency
• Reduce downtime for migrations across cluster
boundaries
“Share nothing" live migration
23
Move virtual machine storage with no downtime
Live storage migration
• Move virtual hard disks (VHDs) attached to a
running virtual machine.
Benefits
• Manage storage in a cloud environment with
greater flexibility and control.
• Move storage with no downtime.
• Update physical storage available to a virtual
machine (such as SMB-based storage).
• Windows PowerShell cmdlets.
24

Hyper-V Move Vm Live
Reliably import virtual machines
Import Wizard
• Detects and fixes problems
• Doesn’t require the virtual machine to be exported
• Allows a virtual machine to be copied to a USB flash drive
• Moves virtual machines more easily and reliably
• Uses Windows PowerShell cmdlets for automation
Benefit
• A simpler, better way to import or copy virtual machines.
26
Merge snapshots while the virtual machine is running
Snapshot features
• Snapshot data are stored in .avhd files
• You can merge the .avhd disk into the parent
while the virtual machine continues to run
Benefit
• Update parent virtual hard disks while the
virtual machine is still running
• I/O is suspended to a small range while data
in the range is processed
• At completion, online merge fixes merged
disks and closes files.
27
Scale, performance, and density
Hyper-V host scale and scale-up
workload support
Offloaded Data Transfers (ODX)
support in Hyper-V
Dynamic Memory improvements
for Hyper-V
Data Center Bridging (DCB)
Resource Metering in Hyper-V
New virtual hard disk format
Virtual Fibre Channel in Hyper-V
Support for 4-KB disk sectors in
Hyper-V virtual disks
Quality of Service (QoS)
Increases scalability of the data center and uses fewer servers to run more
virtual machine workloads.
28
Hyper-V host scale and scale-up workload support
Maximum number
System
Resource
Windows 2008 R2
Windows Server 2012
Beta
64
160
2.5×
Physical memory
1 TB
2 TB
2×
Virtual processors per host
512
1,024
2×
4
32
8×
64 GB
1 TB
16×
Active virtual machines
384
1,024
2.7×
Nodes
16
64
4×
1,000
4,000
4×
Logical processors on hardware
Host
Virtual processors per virtual machine
Virtual
machine
Cluster
Improvement
factor
Memory per virtual machine
Virtual machines
29
Hyper-V host scale and scale-up workload support
Non-Uniform Memory Access
(NUMA) support in a virtual machine
• Projects NUMA topology onto a
virtual machine
• Allows guest operating systems and
applications to make intelligent NUMA
decisions
• Aligns guest NUMA nodes with host
resources
Guest NUMA topology by default matches host NUMA topology
30
Hyper-V host scale and scale-up workload support
SR-IOV support in Hyper-V
• Increases network throughput
• Reduces network latency
• Reduces host CPU overhead for
processing network traffic
Benefits
• Maximize use of host system
processors and memory
• Handle the most demanding
workloads
VF = virtual function
31
Dynamic Memory improvements for Hyper-V
Dynamic Memory
• Introduced in Windows Server 2008
R2 SP1
• Reallocates memory automatically
among running virtual machines
Windows Server "8" Beta
improvements
• Minimum memory
• Hyper-V smart paging
• Memory ballooning
• Runtime configuration
Virtual machine starting with Hyper-V smart paging
32
Dynamic Memory improvements for Hyper-V
Benefits
• Higher consolidation
numbers
• Improved reliability of
Hyper-V operations
• Ability to change
memory
configuration with
minimal downtime
Removing paged memory after virtual machine restart
33
Offloaded Data Transfer (ODX) support in Hyper-V
ODX
• Data transfer between intelligent storage arrays
• Token based
Benefits
• Rapid virtual machine provisioning and migration
• Faster transfers on large files
• Latency minimization
• Array throughput maximization
• Less CPU and network usage
• Performance not limited by network throughput
or server usage
• Improved data center capacity and scale
• Automation
Token-based copy operation
34
Data Center Bridging (DCB)
DCB converges different types of traffic
How DCB works
• Network
• DCB acts as a network adapter feature.
• Storage
• This mechanism provides a hardware
solution for managing network traffic.
• Management
• Live migration
Benefits
• Helps you to ensure QoS
• DCB classifies and dispatches network traffic.
• Windows instructs the adapter to classify
traffic.
• Traffic doesn’t have to originate from the
networking stack.
• Makes it easier to change allocations to
different traffic flow
35
Virtual Fibre Channel in Hyper-V
Access Fibre Channel SAN data from a
virtual machine
• Unmediated access to a SAN
• A hardware-based I/O path to virtual hard disk
stack
• N_Port ID Virtualization (NPIV) support
• A single Hyper-V host connected to different
SANs
• Up to four Virtual Fibre Channel adapters on a
virtual machine
• Multipath I/O (MPIO) functionality
• Live migration
Live migration maintaining Fibre Channel connectivity
36
Hyper-V Replica
New feature
• Replicates Hyper-V virtual machines from a
primary to a Replica site
Benefits
• Affordable in-box business continuity and
disaster recovery solution
• Failure recovery in minutes
• More secure replication across network
• No need for storage arrays
• No need for other software replication
technologies
• Automatic handling of live migration
• Simpler configuration and management
37

Hyper-V Replica
Windows Server 2012: Cloud Optimize Your IT