Transcript “For users contemplating a major new cloud or virtualization initiative, WS2012 should be the platform of choice, and any preconceived notions about.

“For users contemplating a major new cloud or
virtualization initiative, WS2012 should be the platform
of choice, and any preconceived notions about Microsoft
versus VMware for the virtualization layer need to be reexamined.”
Public Cloud
1
Consistent
Platform
Private Cloud
Windows Azure Services
Service Providers
• Scale Performance and Density
• Mission Critical, Scale Up Workloads
• Storage
• Investments in File & Block
• SDN
• Tackling VDI Storage Challenges
• Flexible Infrastructure
• Continuous Availability
• VM Mobility
• Guest NUMA
• Presenting NUMA topology within VM
• Guest operating systems & apps can make
vNUMA node A vNUMA node B
vNUMA node A vNUMA node B
intelligent NUMA decisions about thread and
memory allocation
• Guest NUMA nodes are
aligned with host resources
• Policy driven per host –
best effort, or force
alignment
NUMA node 1 NUMA node 2 NUMA node 3 NUMA node 4
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
16 LPs
64 LPs
320 LPs
Physical Memory Support
1 TB
1 TB
4 TB
Virtual Machine Processor
Support
Up to 4 VPs
Up to 4 VPs
Up to 64 VPs
VM Memory
Up to 64 GB
Up to 64 GB
Up to 1 TB
Yes, one at a time
Yes, one at a time
Yes, with no limits. As many
as hardware will allow.
No. Quick Storage
Migration via SCVMM
No. Quick Storage
Migration via SCVMM
Yes, with no limits. As many
as hardware will allow.
16
16
64
16 Nodes up to 1000 VMs
16 Nodes up to 1000 VMs
64 Nodes up to 8000 VMs
HW Logical Processor
Support
Live Migration
Live Storage Migration
Servers in a Cluster
Cluster Scale
Industry Leading IO
Performance
• VM storage performance on par
with native
• Performance scales linearly with
increase in virtual processors
• Windows Server 2012 Hyper-V
can virtualize over 99% of the
world’s SQL Server.
Windows Server
2008 R2
Windows Server
2012
250,000 IOPS
1,000,000+ IOPS
<3 sec of downtime
400
376
350
292
Minutes
300
250
Windows
Server 2008 R2
200
150
100
109
50
0
100
200
300
Million Million Million
Files
Files
Files
Windows
Server 2012
1800
Series1
1600
Series2
Series3
25%
1400
25%
1200
1000
800
600
400
200
0
1
2
3
4
160000
Series1
155000
Series2
Series3
10%
150000
145000
10%
140000
135000
130000
125000
1
2
3
4
•
WWN
•
•
•
WWN
NPIV port(s)
WWPN A: C0:03:FF:78:22:A0:00:14
WWPN B: C0:03:FF:78:22:A0:00:15
WWPN A: C0:03:FF:78:22:A0:00:14
WWPN B: C0:03:FF:78:22:A0:00:15
Shared Storage
Token
Offload
Read
Virtual
Disk
Offload
Write
Token
Token
Actual Data Transfer
Intelligent Storage
Array
Virtual
Disk
•
Creation of a 10 GB Fixed Disk
200
~3 Minutes
150
100
Time (seconds)
50
<1 Second!
0
Average
Desktop
•
ODX
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
No. Quick Storage
Migration via SCVMM
No. Quick Storage
Migration via SCVMM
Yes, with no limits. As many
as hardware will allow.
VMs on File Storage
No
No
Yes, SMB 3.0
Guest fibre Channel
No
No
Yes
Virtual Disk Format
VHD up to 2 TB
VHD up to 2 TB
VHD up to 2 TB
VHDX up to 64 TB
VM Guest Clustering
Yes, via iSCSI
Yes, via iSCSI
Yes, via iSCSI or FC
No
No
Yes
Live VHD Merge
No, offline.
No, offline.
Yes
Live New Parent
No
No
Yes
Secure Offloaded Data
Transfer (ODX)
No
No
Yes
Live Storage Migration
Native 4k Disk Support
http://msdn.microsoft.com/en-us/library/cc246482(v=prot.20).aspx
http://msdn.microsoft.com/en-us/library/windows/desktop/hh848056(v=vs.85).aspx
http://www.microsoft.com/en-us/download/details.aspx?id=34750
Clustered
Clustered
Scale beyond VLANs with Hyper-V network virtualization
How GRE works
• Defined by RFC 2784 and RFC 2890
• One customer address per virtual machine
• One provider address per host
• Tenant network ID
• MAC header
Benefits
• Lower burden on switches
• Allow traffic analysis, metering, and
control
http://technet.microsoft.com/en-us/library/jj134230(l=en-us,v=WS.11).aspx
http://technet.microsoft.com/en-us/library/jj134174.aspx
VM1
Root Partition
VM2
VM NIC
Host NIC
VM NIC
BFE Service

Forwarding
Windows
extensions
Platformdirect
(WFP)
Extensions
defining
canthe
inspect,
CaptureFilter
extensions
cantraffic,
inspect
traffic
and
drop,
destination(s)
modify,new
and
of each
insert
packet
packets
using WFP
APIs
generate
traffic
for report
purposes

Forwarding
Windows
Antivirus
extensions
andcan
Firewall
capture
software
and filter
usestraffic
WFP for
traffic
filtering
Capture
extensions do not modify existing

Example:
sflow by inMon
–
NEC ProgrammableFlow's
vPFS OpenFlow
Firewall
Callout
Extensible Switch
Filtering Engine
Extension Protocol
Capture Extensions
(NDIS)
Windows Filter
Platform (WFP)
Forwarding Extensions
Extensions
Forwarding
(NDIS)
Extension Miniport
Physical NIC

Extensible Switch traffic
 Examples:
 Example: Virtual Firewall by 5NINE Software
– Cisco Nexus 1000V and UCS
http://technet.microsoft.com/en-us/library/hh831452.aspx
http://msdn.microsoft.com/en-us/library/ff565501(v=VS.85).aspx
http://msdn.microsoft.com/en-us/windows/hardware/gg463267.aspx
• Open, Extensible Virtual
Switch
•
•
•
•
Nexus 1000 Support
Openflow Support
Network Introspection
Much more…
• Advanced Networking
• ACLs
• PVLAN
• …much more…
• Windows NIC Teaming
• Network QoS
• Per VNIC bandwidth reservation & limits
• Network Metering
• DVMQ
• SR-IOV Network Support
• Reduce Latency & CPU Utilization
• Supports Live Migration
Host scaling: dynamic Virtual Machine Queues (VMQs)
Network I/O path without VMQ
Network I/O path with VMQ
• Windows Server 2008 R2: Offload routing and filtering of network packets to the network adapter (enabled by
hardware-based receive queues) to reduce host overhead
• New in Windows Server 2012 : Dynamically distribute incoming network traffic processing to host processors
(based on processor usage and network load)
Reduces latency of network
path
Reduces CPU utilization for
processing network traffic
Increases throughput
Root Partition
Hyper-V Switch
Routing
VLAN Filtering
Data Copy
Virtual Machine
Virtual NIC
Virtual Function
Physical SR-IOV
NIC
Physical NIC
Supports Live Migration
Network
SR-IOV
NetworkI/O
I/Opath
pathwithout
with SR-IOV
SR-IOV Enabling & Live Migration
Turn On IOV




Live Migration
Enable IOV (VM NIC Property)
Virtual Function is “Assigned”
Team automatically created
Traffic flows through VF




Break Team
Remove VF from VM
Migrate as normal
Post Migration

Reassign Virtual Function
 Assuming resources are available
Software path is not used
Virtual
Machine
Network
Stack
Software NIC“TEAM”
“TEAM”
VM has connectivity even if
Software Switch
(IOV Mode)
Virtual Function
Physical
SR-IOV
NIC Physical NIC




Switch not in IOV mode
IOV physical NIC not present
Different NIC vendor
Different NIC firmware
Software Switch
(IOV Mode)
Virtual Function
SR-IOV Physical NIC
Dynamic Virtual Machine
Queue (VMQ) is a feature
available to computers running
Windows Server 2012 with the
Hyper-V server role installed, that
have VMQ-capable network
hardware. VMQ uses hardware
packet filtering to deliver packet
data from an external virtual
machine network directly to
virtual machines, which reduces
the overhead of routing packets
and copying them from the
management operating system to
the virtual machine.
IPsec Task Offload: Microsoft expects
deployment of Internet Protocol security
(IPsec) to increase significantly in the coming
years. The large demands placed on the CPU
by the IPsec integrity and encryption
algorithms can reduce the performance of
your network connections. IPsec Task Offload
is a technology built into the Windows
operating system that moves this workload
from the main computer's CPU to a
dedicated processor on the network adapter.
SR-IOV is a specification that allows a PCIe
device to appear to be multiple separate
physical PCIe devices. The SR-IOV
specification was created and is maintained
by the PCI SIG, with the idea that a standard
specification will help promote
interoperability. SR-IOV works by introducing
the idea of physical functions (PFs) and virtual
functions (VFs). Physical functions (PFs) are
full-featured PCIe functions; virtual functions
(VFs) are “lightweight” functions that lack
configuration resources.
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
Yes, via partners
Yes, via partners
Windows NIC Teaming in box.
VLAN Tagging
Yes
Yes
Yes
MAC Spoofing Protection
No
Yes, with R2 SP1
Yes
ARP Spoofing Protection
No
Yes, with R2 SP1
Yes
SR-IOV Networking
No
No
Yes
Network QoS
No
No
Yes
Network Metering
No
No
Yes
Network Monitor Modes
No
No
Yes
IPsec Task Offload
No
No
Yes
VM Trunk Mode
No
No
Yes
NIC Teaming
•
•
•
•
Helps to increase availability and enable access to server-based
applications during planned and unplanned downtime
Scale: Support for up to 64 nodes and 8,000 VMs in a cluster
HIPAA Breach: Stolen Hard Drives
• March 2012: Large Medical Provider in Tennessee paying $1.5
million to the US Dept. Health & Human Services
• Theft of 57 hard drives that contained protected health information (ePHI)
for over 1 million individuals
• Secured by:
• Security Patrols
• Biometric scanner
• Keycard scanner
• Magnetic locks
• Keyed locks
“71% of health care organizations have suffered at least one data breach within the
last year” -Study by Veriphyr
http://support.microsoft.com/kb/943984
http://support.microsoft.com/kb/2775067
Disaster Recovery
Application/Service
Failover
I/O Redundancy
Physical Node
Redundancy
Hardware Fault
• Hyper-V Replica for Asynchronous Replication
• CSV 2.0 Integration with Storage Arrays for Synchronous Replication
• Non-Cluster Aware Apps: Hyper-V App Monitoring
• VM Guest Cluster: iSCSI, fibre Channel
• VM Guest Teaming of SR-IOV NICs
• Network Load Balancing & Failover via Windows NIC Teaming
• Storage Multi-Path IO (MPIO)
• Multi-Channel SMB
• Live Migration for Planned Downtime
• Failover Cluster for Unplanned Downtime
• Windows Hardware Error Architecture (WHEA)/RAS
73
Disaster Recovery Challenges
• Cost
• Complexity
• Inflexibility
• Initial Replication
• Distance Requirements
•
•
Sandy: NJ Coast Before and After
•
•
http://www.microsoft.com/en-us/download/details.aspx?id=34591
Largest VMs for mission-critical workloads
Largest VM disks for massive data storage
Largest cluster sizes for scale-out infrastructure
Deep Integration with hardware for extreme performance
Best in Class Agility
Open & Extensible
Software Defined Networking in the box
Built-in replication for simplified disaster recovery
http://t.co/R25yZMOX