Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Windows Server 2012 R2 Jump Start - Networking
1.
2. Day 1
Introducing Windows Server 2012 R2
Server Virtualization in Windows Server 2012 R2
Cloud Optimized Networking in Windows Server 2012 R2
Storage in Windows Server 2012 R2
Day 2
Server Management & Automation with Windows Server 2012
R2
VDI with Windows Server 2012 R2
Access & Information Protection with Windows Server 2012 R2
Web Application & Platform with Windows Server 2012 R2
Cloud Optimized Networking in Windows Server 2012 R2
3. DOWNLOAD
Windows Server
2012 R2 Preview
aka.ms/ws2012r2
#WS2012R2JS
DOWNLOAD
System Center
2012 R2 Preview
aka.ms/sc2012r2
Hands-On Labs
http://www.microsoftvirtualacademy.com
System Center 2012 R2 Jumpstart
July 15th - http://aka.ms/SCR2JS
5. 5
Delivering Continuously Available Applications
Advancing Software Defined Networking
Hyper-V Extensible
Switch
Hyper-V Network
Virtualization
DHCP FailoverSMB Multichannel
Quality of Service
Simplifying Datacenter
Network Management
IP Address
Management (IPAM)
Remote Live capture
Network Management
using Virtual Machine
Manager
Network Monitoring
using
Operations Manager
Microsoft Windows
PowerShell
Networking in the
Hybrid Cloud
Extending to Azure
Extending to Service
Providers
Cross premise
connectivity
Improving Network
Performance
vRSS
Single Root I/O
Virtualization (SR-IOV)
NIC Teaming
SMB Direct (RDMA)
Dynamic VMQ
Inbox HNV Gateway
Virtual Machine
Manager
Enhancements
6. Open, Extensible and Standards based
Built-in and production ready
Innovation in software and hardware
Hyper-V Network
Virtualization
Hyper-V
Extensible Switch
6
Inbox Gateway
Management
with System
Center Virtual
Machine
Manager
7. 7
BACKGROUND
• Network virtualization lags behind compute and storage
• Administration within the data center may be soiled
THE CHALLENGES
• Physical network configuration is not flexible
• Workloads tied to underlying hardware configurations
• Configuration changes are manual and cumbersome
• Diverse network infrastructure requires vendor-specific
management and control
• Greater VM mobility and density difficult to achieve
VLAN tags
Aggregation
Switches
VMs
ToRToR
8. 8
Enables
software to
dynamically
manage the
network by:
Enabling integrated policies that span physical and virtual
networks
Abstracting workloads from the physical network
Controlling datacenter traffic flow
9. Host NIC
9
Hyper-V Extensible Switch architecture
• Extends virtual switch functionality by adding
switch extensions
• Provides open platform supporting third-party
plug-ins to add functionality
• Lets customers manage virtual network the
same way they would manage a physical
network
• Helps monitor the security of virtual machine
to virtual machine traffic
• Provides unified management and
enforcement of plug-ins with Virtual Machine
Manager across entire datacenter
• Includes NDIS filter drivers, WFP callout
drivers, Ingress filtering, Destination lookup
and forwarding and Egress filtering extensions
Parent Partition
Extension C
Extension D
Extension A
Extension Miniport
Extension Protocol
Virtual Switch
Capture Extensions
Filtering Extensions
Forwarding Extension
VM NIC VM NIC
Virtual Machine Virtual Machine
Physical NIC
10. Host NIC
10
Hyper-V Extensible Switch architecture
Parent Partition
Extension C
Extension D
Extension A
Extension Miniport
Extension Protocol
Virtual Switch
Capture Extensions
Filtering Extensions
Forwarding Extension
VM NIC VM NIC
Virtual Machine Virtual Machine
Physical NIC
Key Features
• Extension monitoring & uniqueness
• Extensions that learn VM life cycle
• Extensions that can veto state changes
• Multiple extensions on same switch
Several Partner Solutions Available
• Cisco – Nexus 1000V & UCS-VMFEX
• NEC – ProgrammableFlow PF1000
• 5nine – Security Manager
• InMon - SFlow
Build Extensions for
Capturing, Filtering &
Forwarding
11. How network virtualization works
• Overlays multiple virtual networks on
shared physical network
• Uses industry standard General Routing
Encapsulation (NVGRE) protocol
Problems solved
• Creates VM mobility across
datacenter, hoster cloud or Azure
without network constraints
• Provides ability to import customer IP
addresses and network topology
• Helps remove VLAN constraints
• Helps eliminate hierarchical IP address
assignment for virtual machines
11
Physical server Physical network
Blue virtual
machine
Yellow virtual
machine Blue network Yellow network
12. • Tenants with overlapping IP Address
range share same physical network
• Policies enforced at host level using
PowerShell or System Center Virtual
Machine Manager
• DHCP servers can be part of
virtualized network to enable locally
assigned IP addresses
• Supports guest clustering
SQL Server Web
Orange sees
SQL Server Web
Blue sees
SQL Server SQL Server Web Web
192.168.2.12192.168.1.10
10.1.1.1 192.168.1.10
10.1.1.2 192.168.2.12
What’s really happening
192.168.n.n
PROVIDER ADDRESS SPACE (PA)
10.1.1.1 192.168.1.10
10.1.1.2 192.168.2.12
10.1.1.210.1.1.1
10.1.1.1 10.1.1.2
CUSTOMER ADDRESS SPACE
10.1.1.1 192.168.1.10
10.1.1.2 192.168.2.12
10.1.1.1 192.168.1.10
10.1.1.2 192.168.2.12
10.1.1.1 192.168.1.10
10.1.1.2 192.168.2.12
10.1.1.1 192.168.1.10
10.1.1.2 192.168.2.12
10.1.1.1 10.1.1.2
10.1.1.1 10.1.1.2
12
15. Challenges
• Hoster wants to provide isolated networks for tenant
VMs with integral S2S VPN and NAT
• Enterprises have virtualized networks split across
different datacenters or virtualized networks (NVGRE
aware) communicating to physical networks (NVGRE
unaware)
Solution
• Multi-tenant VPN gateway in Windows Server 2012 R2
Preview
• Integral multitenant edge gateway for seamless
connectivity
• Guest clustering for high availability
• BGP for dynamic routes update
• Encaps/Decaps NVGRE packets
• Multitenant aware NAT for Internet access
Host Datacenter
Network Virtualization Fabric
HostHost
Internet
FabrikamContoso
Multi-tenant VPN
Gateway
Bridge Between VM Networks
& Physical Networks
16. 16
What it means:
• Provides ability to control physical network hardware
directly from applications
• Enforces routing policies on the fly
• Requires programmable hardware that uses a standard
protocol like OpenFlow, Cisco OnePK and so on.
Challenges:
• Adds complexity to the application
• Creates challenges in heterogeneous environment
Is it production ready?
• Applicable to certain classes of applications like
Microsoft Lync, Network diagnostic tools, high fidelity
video games
• Most Line of Business applications and workloads may
not need this level of control
Aggregation
Switches
ToRToR
VM VM
Application Application
17. Challenges
Manage a large number of physical and virtual switches
Integrate management of physical and virtual networks
Solution
Logical Network
Organizes and simplifies network assignments for
hosts, virtual machines and services
Integrated physical and virtual switch VLAN policy
VM Network
Creation/deletion of isolated virtual network overlay
(HNV) on physical network
18. Challenges
Allow seamless migration of VM while maintaining network
policy
Solution
Logical Switch
Single logical entity spanning hosts
Consistent policy and configuration
Management of Hyper-V Extensible Switch
Installation and configuration of switch extensions
Configuration of network policies
Network policies automatically move with the VM
Includes 3rd party extensions
19. Communicating using
WS-MAN
OMI OMI OMI
How switch management works
Standards-based CIM model
Switches running Open Management
Infrastructure (OMI)
Switch Management PowerShell
Cmdlets
Problems solved
Common management interface
across multiple network vendors
Automate common network
management tasks
Logo Program enables customers to
find/buy switches that “just work”
21. • Migrate workloads
seamlessly across
clouds
• Preserve
policies, VM
settings, and IP
addresses
• Move from test to
production with
minimal network
configuration
• Reduce Opex related
to networking
• Simplify datacenter
consolidation and
mergers and
acquisitions
• Extend datacenter
into hybrid cloud
environment without
specialized
networking gear
• Enables customers
to bring their own IP
addresses and DHCP
servers
• Realize scalable
multi-tenancy
• Simplify connectivity
to customer
datacenter
• Provide flexible VM
placement without
reconfiguration
• Decouple server and
network admin roles
to increase agility
• Enforce unified
policy across entire
datacenter from a
single management
plane
To Workload Owners To Enterprises To Hosters
To Private/Public
Cloud Datacenter
Admins
22. DHCP
failover
Quality of Service
SMB
Multichannel
Embrace a multi-
vendor ecosystem
Provide consistent
bandwidth for
services
Run services
without
interruption
22
Automatically
remediate issues
with no human
intervention NIC Teaming
23. SMB
client
SMB
server
File
copy
NIC NIC
NIC NIC
File
copy
• Automatic detection and use of multiple network
connections between SMB client and server
• Helps server applications be resilient to network
failure
• Transparent Failover with recovery of network
failure if another connection is unavailable
• Improved throughput
• Bandwidth aggregation through NIC
Teaming
• Multiple nodes/CPUs for network
processing with RSS-capable network
adapters
• Automatic configuration with very little
administrative overhead
23
24. • Automatic DHCP failover based on DHCP
failover IETF spec
• Provides multi-site IP address continuity to
clients by helping eliminate single points of
failure
• Provides in-box support for
failover, without the need for clustering
• Uses a failover setup consisting of two
servers located across different geographic
locations
• Includes active/active or active/passive
behavior
• Simple provisioning and configuration of
DHCP server using PowerShell
24
Hot standby
DHCP failover in a
hub-and-spoke
deployment
Load-sharing
DHCP failover in a
single site with a
single subnet
25. • Helps guarantee predictable network
performance and fair sharing during congestion
• Supports bandwidth floors and bandwidth caps
• Helps enforce customer SLAs and maximum
pricing caps
• Sets QoS for virtual machine or traffic type
• Uses software built into Windows Server 2012 R2
Preview or hardware capable of Data Center
Bridging (DCB) to assign minimum QoS settings
• Supports dynamic change of QoS settings
through PowerShell without any downtime
25
Runtime
bandwidth
demand (gigabits
per second)
Service Reservation T1 T2 T3
Virtual
machine
30% 4 4 2
Storage 40% 5 5 6
Live
migration
20% 0 3 2
Cluster
Shared
Volume
10% 0.5 1 0
T2
3
4
1
T3
2
6
2
T1
4
5
0.5
Actual bandwidth
usage by service
When
bandwidth is
available, each
service takes as
much as it can
When the link
is congested,
each service
takes its fair
share
When bandwidth
becomes
available, each
service takes as
much as it wants
2
26. Virtual
adapters
Virtual
adapters
Team network
adapter
Team network
adapter
• Provides network fault tolerance and
continuous availability when network adapters
fail by teaming multiple network interfaces
• Supports all vendors in-box
• Facilitates local or remote management
through Windows PowerShell or UI
• Enables teams of up to 32 network adapters
• Aggregates bandwidth from multiple network
adapters
• Includes multiple nodes: switch dependent
and independent
27. Virtual
adapters
Virtual
adapters
Team network
adapter
Team network
adapter
TCP streams or "flows” are
generally not continuous
Groups of packets sent between
flows are called “flowlets”
Dynamic load balancing detects
breaks in a flow of sufficient
length to minimize possibility
of packet reordering
Flows can be moved to other
team members on flowlet
boundaries to rebalance traffic
Dynamic LBFO maximizes
resource utilization in teamed
NICs by balancing loads across
all NIC team members
Ideal when there are fewer
VMs per team
29. File Client
SMB
Buffer
File Server
With RDMA
29
Without RDMA
App
Buffer
SMB
Buffer
OS
Buffer
Driver
Buffer
SMB
Buffer
OS
Buffer
Driver
Buffer
App
Buffer
SMB
Buffer
rNICrNIC NIC Adapter
BufferNICAdapter
Buffer
Adapter
Buffer
Adapter
Buffer
iWARP
InfiniBand
• Higher performance through offloading of
network I/O processing onto network adapter
• Higher throughput with low latency and ability
to take advantage of high-speed networks
(such as InfiniBand and iWARP)
• Remote storage at the speed of direct storage
• Transfer rate of around 50 Gbps on a single
NIC port
• Compatible with SMB Multichannel for load
balancing and failover
30. Without VMQ
• Hyper-V Virtual Switch is responsible for
routing & sorting packets for VMs
• This leads to increased CPU processing, all
focused on CPU0
With VMQ
• Physical NIC creates virtual network
queues for each VM to reduce host CPU
With Dynamic VMQ
• Processor cores dynamically allocated for
a better spread of network traffic
processing
Increased efficiency of
network processing on
Hyper-V hosts Hyper-V Host Hyper-V Host Hyper-V Host
31. • vRSS provides near line rate to a VM on
existing hardware, making it possible to
virtualize traditionally network intensive
physical workloads
• Extends the RSS functionality built into
Windows Server 2012
• Maximizes resource utilization by
spreading VM traffic across multiple
virtual processors
• Helps virtualized systems reach higher
speeds with 40 Gbps and 100 Gbps NICs
• Requires no hardware upgrade and
works with any NICs that support RSS
Node 0 Node 1 Node 2 Node 3
2
2
3
3
1
1
0
0
Incoming
packets
vProc
vProc
vProc
vProc
vNIC
32. 32
• VM traffic bypasses virtual switch and performs I/O
directly to NIC
• Ideal for high I/O workloads that do not require port
policies, QoS, or network virtualization enforced at the
end host virtual switch
• Most 10Gbps and in-box NICs SR-IOV capable
Benefits
• Maximizes use of host system processors and memory
• Reduces host CPU overhead for processing network
traffic (by up to 50%)
• Reduces network latency (by up to 50%)
• Provides higher network throughput (by up to 30%)
• Full support for Live Migration
Host
Virtual Machine
VM Network Stack
Synthetic NIC
Hyper-V
Extensible Switch
SR-IOV NIC VF
Virtual Function
VFVF
33. 33
Provide an
easy-to-use,
robust automation
framework
Monitor
resource usage
Manage IP
address space and
consolidate
external tools
Simplify
management in
multisite
environments
Management
with Virtual
Machine
Manager
IP Address
Management
Windows
PowerShell
Resource
Metering
Monitoring with Operations Manager
34. 34
IPAM distributed architecture
Domain
europe.corp.woodbridge.com
IPAMServer
(UK)
DHCP,DNS, DC,
and NPS servers
IPAMServer
(Bangalore)
DHCP,DNS, DC, a
nd NPSservers
Domain
fareast.corp.woodbridge.com
IPAMServer
(Hyderabad)
DHCP,DNS, DC, a
nd NPSservers
Site:Hyderabad
Branch office
Site:Bangalore
Branch office
Site:UK
Branch office
IPAMserver
(Redmond)
DHCP,DNS, DC,
and NPS servers
Site:Redmond
Head office
• Inbox feature for integrated management of IP
addresses, domain names, and device identities
• Tightly integrates with Microsoft DNS and
DHCP servers
• Provides custom IP address space display,
reporting, and management
• Audits server configuration changes and tracks
IP address use
• Migrates IP address data from spreadsheets or
other tools
• Monitors and manages specific scenario-based
DHCP and DNS services
35. 35
• Manages virtual address space in addition to
physical address space
• Imports and exports network configurations
automatically through plugin for System Center
Virtual Machine Manager
• Enables synchronization of Active Directory
Sites and subnets information with IPAM
• Supports large scale enterprise deployments
• Uses SQL Server to store IP address information
• Lets admins define user roles, access scope and
access policy through role-based access control
Data collection tasks
Network Administrator
Fabric Administrator
System Administrator
Forensics Investigator
SecurityGroups
36. Comprehensive coverage with more than 400 cmdlets related to
networking
36
Remote machine management support
Integrated object model
37. 37
Metrics
A two-tenant environment built with
Hyper-V in Windows Server 2012 R2
Preview
• Average CPU use
• Average memoryuse
• Minimum memoryuse
• Maximummemory use
• Maximumdisk allocation
• Incoming network traffic
• Outgoing network traffic
• Storage IOPS
Virtual Machine
Resource Metering
20 10
Resource Pool Internet
Resource Metering
10 5
3045 2540
Resource pool
Internet
Customer2
30 55
Resource pool
Internet
Customer1
0
0 0
0
Benefits
• Tracks and meters resource
usage and provides
infrastructureto build
chargeback solutions
• Tracks resource usage of
individual virtual machines
or virtual machine pools
• Metering not affected by
virtual machine movement
• Uses active control lists
(ACLs) from network
metering port
• Provides complete Windows
PowerShell support
1015202530354045505152025
38. Server or client with
Microsoft Message
Analyzer
Windows Server
2012 R2
WMI to configure the filters and truncation
WMI starts/stops the session
Truncated network traffic redirected
ETW events
Remote Live Monitoring provides remote packet and
ETW event capture from any host in the datacenter,
enabling low-touch diagnostics at high scale
• Remote monitoring of network traffic on a
in Windows Server 2012 is not simple
• Windows Server 2012 R2 Preview makes it
easy to mirror and capture network traffic
for remote and local viewing
• Provides integrated GUI experience
with Message Analyzer
• Collects offline traffic captures from
remote computers
• Provides filters to select packets by IP
addresses and VMs
• Captures ETW events for remote and
local viewing
39. 39
Seamlessly extend Datacenter to Azure
Inbox Gateway to extend beyond private cloud
Extending your private cloud to hosters
Extending your private cloud to Azure
Cross-premises connectivity
40. VPN site-to-sitetunnel
IKEv2-IPsec
VPN site-to-sitetunnel
IKEv2-IPsec
VPN site-to-sitetunnel
IKEv2-IPsec
Hosted Cloud
Contoso
private
cloud
Woodgrove
private
cloud
Subnet1
Subnet2
Subnet1
Subnet2
Contoso
London
branch
Subnet3
Contoso
New York
branch
Subnet4
Woodgrove
Brazilian
branch
Subnet3
Subnet4
WindowsServer2012 R2
Previewremoteaccess
site-to-siteVPN server
Industrystandard
IKEv2-IPsecrouter
40
VPN site-to-site functionality in
remote access:
• Provides cross-premises connectivity
between enterprises and hosting service
providers
• Connects to private subnets in hosted
cloud networks
• Provides connectivity among
geographically separate enterprises
41. Orange
Corp site1
Orange
Corp site2
S2S Tunnel
S2S Tunnel
S2S Tunnel
S2S Tunnel
S2S Tunnel
Orange Virtual
Network
Blue
GW
Green
GW
Orange
GW
Includes Site-to-site (S2S)
VPN as part of Remote
Access Server
Requires Windows Network
Virtualization
Needs one VM per tenant for
the gateway
42. Orange
Corp site1
Orange
Corp site2
S2S Tunnel
Orange Virtual
Network
BGP
Active-Standby
Provides multitenant S2S
gateway
Includes guest clustering for
HA
Uses BGP for dynamic routes
update
Provides multitenant-aware
NAT for Internet access
43. Virtual Network
Your datacenter
On premises
43
Subnet 1 Subnet 2 Subnet 3 DNS
Server
Individualcomputers
behind corporate
firewall
VPN
Gateway
VPN
Device
Site-to-Site
VPN
Remote workers
VPN
Device
Extend your datacenter
to Azure by creating VMs
in private networks
Connect individual
computers to Azure VMs
and virtual networks using
Point to Site connectivity
without VPN device
Windows inbox gateway to
connect virtual networks in
private cloud and Azure
45. DOWNLOAD
Windows Server
2012 R2 Preview
aka.ms/ws2012r2
#WS2012R2JS
DOWNLOAD
System Center
2012 R2 Preview
aka.ms/sc2012r2
Hands-On Labs
http://www.microsoftvirtualacademy.com
System Center 2012 R2 Jumpstart
July 15th - http://aka.ms/SCR2JS