What's New in Windows Server 2012 Hyper-V, Part 2

1. VIR309 What's New in Windows Server 2012 Hyper-V, Part 2 Jeff Woolsey Windows Server & Cloud Microsoft Corporation

2. Session Objectives and Takeaways • What’s New In Windows Server 2012 Hyper-V Part 2 • Networking • Clustering • VM Mobility • Linux as a Guest • We can’t cover everything in two sessions • There’s simply too much content. Pointers to other sessions too…

3. Helping You Cloud Optimize Your Business Public Identity ▪ Virtualization ▪ Management ▪ Development Commontechnologies Private The Microsoft Hybrid Cloud

4. Building your own cloud just got a lot easier with Windows Server 2012.

5. Windows Server 2012 Networking

6. Network ConsiderationsCustomers • How do I ensure network multi-tenancy? • IP Address Management is a pain. • What if VMs are competing for bandwidth? • Fully Leverage Network Fabric • How do I integrate with existing fabric? • Network Metering? • Can I dedicate a NIC to a workload?

7. Windows Server 2012 is optimized for Hybrid Clouds to host multi-tenant workloads Hybrid Clouds Tenant 1: Multiple VM Workloads Tenant 2: Multiple VM Workloads Data Center

8. In a multi-tenant environment … … customers want security and isolation Security Tenant 1: Multiple VM Workloads Tenant 2: Multiple VM Workloads Data Center LEARN MORE [VIR305] Hyper-V Network Virtualization for Multi-Tenancy in WS2012

9. Multi-Tenant Network Requirements • Tenant wants to easily move VMs to/from the cloud • Hoster wants to place VMs anywhere in the data center • Both want: Easy Onboarding, Flexibility & Isolation Cloud Data Center Woodgrove Bank Blue 10.1.0.0/16 Contoso Bank Red 10.1.0.0/16

10. One Solution: PVLAN u Blue10.1.1.21 Green 10.1.1.31 Red1 10.1.1.11 Red2 10.1.1.12 • Isolation Scenario • Hoster wants to isolate all VMs from each other and allow internet connectivity • #1 Customer Ask from hosters • Community Scenario • Hoster wants tenant VMs to interact with each other but not with other tenant VMs • Requires a VLAN id for each “community” (limited scalability, only 4095 VLAN IDs) Hyper-V Switch Isolated 4, 7 Community 4, 9 Community 4, 9 Isolated 4, 7 Win 8 Host To Internet (10.1.1.1)

11. Introducing Hyper-V Network Virtualization Woodgrove network Contoso network Woodgrove VM Contoso VM Physical server Physical network • Hyper-V Network Virtualization • Run multiple virtual networks on a physical network • Each virtual network has illusion it is running as a physical fabric • Hyper-V Machine Virtualization • Run multiple virtual servers on a physical server • Each VM has illusion it is running as a physical server LEARN MORE [VIR305] Hyper-V Network Virtualization for Multi-Tenancy in WS2012

12. Even when hardware fails … … customers want continuous availability Reliability Tenant 1: Multiple VM Workloads TEAMING Tenant 2: Multiple VM Workloads Data Center LEARN MORE [WSV314] Windows Server 2012 NIC Teaming & MultiChannel Solutions

13. Even when multiple VMs are competing for bandwidth … … customers want predictability Predictability 25 15 Tenant 1: Multiple VM Workloads Tenant 2: Multiple VM Workloads Data Center $$ $$$$

14. Cloud admins want scalability … … and customers want performance Scalability Tenant 1: Multiple VM Workloads Tenant 2: Multiple VM Workloads Data Center

15. Customers want specialized functionality with lots of choice … … for firewalls, monitoring and physical fabric integration Extensibility Tenant 1: Multiple VM Workloads Tenant 2: Multiple VM Workloads Data Center LEARN MORE [VIR307] Get Hands-On with the New Hyper-V Extensible Switch in WS2012

16. Hyper-V Extensible Switch VM1 VM2 Firewall BFE Service • Capture extensions can inspect traffic and generate new traffic for report purposes • Capture extensions do not modify existing Extensible Switch traffic • Example: sflow by inMon • Forwarding extensions direct traffic, defining the destination(s) of each packet • Forwarding extensions can capture and filter traffic • Examples: • Cisco Nexus 1000V and UCS • NEC ProgrammableFlow'svPFSOpenFlow • Filtering extensions can also be implemented using NDIS filtering APIs • Example: VM DoS Prevention by Broadcom • Windows Filter Platform (WFP) Extensions can inspect, drop, modify, and insert packets using WFP APIs • Windows Antivirus and Firewall software uses WFP for traffic filtering • Example: Virtual Firewall by 5NINE Software Root Partition Callout Filtering Engine Extensible Switch Extension Protocol Capture Extensions Capture Extensions VM NIC VM NIC Host NIC Physical NIC WFP Extensions WFP Extensions Filtering Extensions Filtering Extensions Forwarding Extensions Forwarding Extensions Extension Miniport LEARN MORE [VIR307] Get Hands-On with the New Hyper-V Extensible Switch in WS2012

17. Cloud Admins Want Scale, Customers PerfDVMQ, IPsec Task Offload, SR-IOV Dynamic Virtual Machine Queue (VMQ) is a feature available to computers running Windows Server 2008 R2 with the Hyper-V server role installed, that have VMQ-capable network hardware. VMQ uses hardware packet filtering to deliver packet data from an external virtual machine network directly to virtual machines, which reduces the overhead of routing packets and copying them from the management operating system to the virtual machine.

18. Feature Rich Networking in the Box • Open, Extensible Virtual Switch • Nexus 1000 Support • Openflow Support • Network Introspection • Much more… • Advanced Networking • ACLs • PVLAN • …much more… • Windows NIC Teaming • Network QoS • Per VNIC bandwidth reservation & limits • Network Metering • DVMQ • SR-IOV Network Support • Reduce Latency & CPU Utilization • Supports Live Migration

19. Single-Root I/O Virtualization (SR-IOV) • Reduces latency of network path • Reduces CPU utilization for processing network traffic • Increases throughput • Direct device assignment to virtual machines without compromising flexibility • Supports Live Migration Root Partition Virtual Machine Hyper-V Switch Routing VLAN Filtering Data Copy VMBUS Virtual Function Physical NIC Virtual NIC SR-IOV Physical NIC Network I/O path without SR-IOV Network I/O path with SR-IOV

20. SR-IOV Enabling & Live Migration Turn On IOV Live Migration Post Migration • Enable IOV (VM NIC Property) • Break Team • Reassign Virtual Function • Assuming resources are available • Virtual Function is “Assigned” • Remove VF from VM • Team automatically created • Migrate as normal Virtual Machine • Traffic flows through VF Software Switch (IOV Mode) Software Switch (IOV Mode) Network Stack • Software path is not used “TEAM” “TEAM” SR-IOV Physical NIC Physical NIC SR-IOV Physical NIC Virtual Function Virtual Function Software NIC Software NIC VM has connectivity even if • Switch not in IOV mode • IOV physical NIC not present • Different NIC vendor • Different NIC firmware

21. DVMQ vs. SR-IOV Considerations • DVMQ Pros: • Improves VM Performance • Provides Receive Side Scaling benefits by spreading network load across multiple logical processors • Can use the Hyper-V Extensible Switch • DVMQ Cons: • If you need greater than 10 Gb/E for a workload, SR-IOV is likely the better choice • SR-IOV Pros: • Great performance • Great for low latency workloads • SR-IOV Cons: • Bypasses the virtual switch

22. Cloud Admins Want Scale, Customers PerfDVMQ, IPsec Task Offload, SR-IOV IPsec Task Offload: Microsoft expects deployment of Internet Protocol security (IPsec) to increase significantly in the coming years. The large demands placed on the CPU by the IPsec integrity and encryption algorithms can reduce the performance of your network connections. IPsec Task Offload is a technology built into the Windows operating system that moves this workload from the main computer's CPU to a dedicated processor on the network adapter. SR-IOV is a specification that allows a PCIe device to appear to be multiple separate physical PCIe devices. The SR-IOV specification was created and is maintained by the PCI SIG, with the idea that a standard specification will help promote interoperability. SR-IOV works by introducing the idea of physical functions (PFs) and virtual functions (VFs). Physical functions (PFs) are full-featured PCIe functions; virtual functions (VFs) are “lightweight” functions that lack configuration resources. Dynamic Virtual Machine Queue (VMQ) is a feature available to computers running Windows Server 2008 R2 with the Hyper-V server role installed, that have VMQ-capable network hardware. VMQ uses hardware packet filtering to deliver packet data from an external virtual machine network directly to virtual machines, which reduces the overhead of routing packets and copying them from the management operating system to the virtual machine.

23. Advanced Network SecurityDHCP Guard, Router Guard, Monitor Port • DHCP Guard is a security feature that drops DHCP server messages from unauthorized virtual machines pretending to be DHCP servers. • Router Guard is a security feature that drops Router Advertisement and Redirection messages from unauthorized virtual machines pretending to be routers. • Monitor Mode duplicates all egress and ingress traffic to/from one or more switch ports (being monitored) to another switch port (performing monitoring)

24. Manage to a Service Level AgreementNetwork Bandwidth & QoS • Bandwidth Management allows you to easily reserve minimum or set maximums to provide QoS controls to manage to a service level agreement

25. Windows Server 2012 Networking: It’s All ThereFeature rich, extensible, in the box, no compromises

26. Complete VM Mobility

27. Your Thoughts on VM Mobility • Don’t provide new features that preclude Live Migration. • I want to be able to securely move any part of a VM anywhere at anytime. No Limits. • No Downtime Servicing • SAN Upgrades/Migrations • When VMs migrate, move the historical data with the VM • Fully Leverage hardware to speed migrations

28. Virtual Machine Mobility • Live Migration with High Availability • SMB Live Migration • Live Storage Migration Concurrent Migration: Limited Only By Hardware Resources

29. Live Storage Migration Hyper-V • Enables Storage Load Balancing • No downtime servicing • Leverages Hyper-V Offloaded Data Transfer (ODX) Virtual Machine 1 VHD Stack 3 2 VHD VHD 4 5 Destination Device Source Device

30. Wouldn’t it be great if you could Live Migrate a VM with nothing but an Ethernet cable? We think so too… Introducing: Shared Nothing Live Migration

31. demo VM Mobility Name Title Group

32. VM MobilityComplete mobility. Simply the best. • Live Migration with High Availability • Live Migrate among servers in a failover cluster • SMB Live Migration • Live Migrate VMs among servers with SMB storage • Live Storage Migration • Live Migrate VM storage from one volume to another without downtime • Share Nothing (SNO) Live Migration • Live Migrate VMs among servers with nothing, but an Ethernet connection LEARN MORE [VIR304] Building Flexible Hyper-V Environments for LM & Storage Migration

33. Disaster Recovery

35. Disaster Recovery Challenges • Cost • Complexity • Inflexibility • Initial Replication • Distance Requirements

36. Hyper-V ReplicaUnlimited Replication • Disaster Recovery Scenarios: • Planned, Unplanned and Test Failover • Pre-configuration for IP settings for primary/remote location • Key Features: • RPO/RTO in minutes • Seamless integration with Hyper-V and Clustering • Automatically handles all VM mobility scenarios (e.g. Live migration) • Supports heterogonous storage between primary and recovery • Integrates with Volume Shadow Services (VSS) LEARN MORE [SCIM329] Enabling Disaster Recovery for Hyper-V workloads using Hyper-V Replica

37. demo Hyper-V Replica

38. Hyper-V ReplicaComplementsArray Based Replication LEARN MORE [SCIM329] Enabling Disaster Recovery for Hyper-V workloads using Hyper-V Replica

39. Key Hyper-V Replica Takeaways • Easy to Setup • Via wizard • Or, via PowerShell • Works with your current hardware • All you need is two connected servers running Windows Server 2012 • No Guest Dependencies

40. Hyper-V 2012 & Linux Guests

41. Microsoft Committed to Interoperability • July 2009 • Microsoft contributes Linux drivers under GPL v2 • March 2012 • “Microsoft appeared in the top-20 contributors for a kernel release” • Q2 2012 • All Hyper-V Drivers in mainline Linux Kernel • Storage, Networking, VMBus, Input, Utilities, etc • SUSE includes the Drivers • Ubnutu 12.04 and later include

42. Linux on Hyper-V • Linux workloads can be consolidated into VMs running on to a Microsoft hypervisor at no cost • Hyper-V hosted Linux VMs can leverage high-end enterprise features: • High Availability • Live Migration, Shared Nothing Live Migration • VM Replication with Hyper-V Replica • Linux VMs can be managed centrally from System Center VMM • VM scale improvements (CPU, memory, disk, etc.)

43. Why Windows Server 2012 Hyper-V for Private Cloud?

44. Windows Server 2012 for Cloud • Most Manageable & Extensible • Hyper-V Extensible Switch • New Minimal Server Install (MinShell) • PowerShell Flexibility • Persistent Metrics • Maintenance Mode in the Box

45. Windows Server 2012 for Cloud • Most Scalable • Most physical memory per server • Largest Virtual Disks (32x) • Most Nodes per cluster • Most VMs per cluster • Most NICs per Team • Native 4K disk support • Most Virtual Disks per VM • …and the list goes on and on…

46. Windows Server 2012 for Cloud • Security Throughout • BitLocker integration with Failover Cluster • Secure Guest Fiber Channel • DHCP Guard, Router Guard • IPSec Task Offload • Secure Boot, Attestation, Measured Boot • Simple Authentication

47. Windows Server 2012 for Cloud • Complete VM Mobility In the Box • Share Nothing Live Migration • SMB Live Migration • Live Migration with High Availability • Live Storage Migration • Concurrent Live Migration • Concurrent Live Storage Migration

48. Windows Server 2012 for Cloud • Most Feature Rich, All Server Editions include: • Hyper-V Extensible Virtual Switch • Hyper-V Replica • Live Storage Migration • Network I/O Control • Storage I/O Control • SR-IOV • More… • Hyper-V Resource Pools • Hyper-V Offloaded Data Transfer • GPU Accelerated VM Video • ….And… Hyper-V Network Virtualization

49. In Review: Session Objectives and Takeaways • Windows Server 2012: The Definitive Cloud OS • Designed for Mission Critical, Scale Up • New Rich Industry Leading Networking • Hyper-V Extensible Switch • Hyper-V Network Virtualization • Unparalleled VM Mobility • Share Nothing Live Migration • Unlimited VM Replication with Hyper-V Replica

50. Q & A