Cloud Optimized Networking in Windows Server 2012 R2

Flat or shrinking IT
budgets even as business
expectations increase.
“Keeping the lights on”
mandate reduces agility to
address app owners’ needs.
Efficient datacenter
operations across
entire customer base.
Need to offer differentiated
services to customers.
Enterpriseclass
Simple and
cost-effective
Complexities due to diverse
datacenter infrastructure.
End user pressure to
enable access to corporate
information from a variety
of devices.
Application
focused
User centric
Delivering
Continuously
Available
Applications
Improving
Network
Performance
Advancing
Software Defined
Networking
Networking in the
Hybrid Cloud
Simplifying
Datacenter
Network
management
Advancing Software Defined Networking
Improving Network
Performance
Simplifying Datacenter
Network Management
Networking in the
Hybrid Cloud
Hyper-V Network
Virtualization
Hyper-V Extensible
Switch
SMB Direct (RDMA)
IP Address
Management (IPAM)
Cross premise
connectivity
Inbox HNV Gateway
Virtual Machine
Manager
Enhancements
vRSS
Microsoft Windows
PowerShell
Extending to Azure
Single Root I/O
Virtualization (SR-IOV)
Remote Live capture
Extending to Service
Providers
Dynamic VMQ
Network Management
using Virtual Machine
Manager
Delivering Continuously Available Applications
SMB Multichannel
Quality of Service
DHCP Failover
NIC Teaming
Network Monitoring
using
Operations Manager
Extensions for Capturing,
Filtering & Forwarding
VM NIC
Key Features
Host NIC
•
Rich policies with ACLs, QoS, SLAs,
isolation, DHCP guard, router guard
•
Management framework for extensions
Extension Protocol
•
Live migration support for extensions
Capture
Extensions
Extension
A
•
Extensions can veto state changes
•
Multiple extensions on same switch
Virtual Switch
Filtering
Extensions
Extension
C
Forwarding
Extension
Extension
D
Several Partner Solutions Available
•
Cisco – Nexus 1000V & UCS-VMFEX
•
NEC – ProgrammableFlow PF1000
•
5nine – Security Manager
•
InMon - SFlow
Extension Miniport
Hyper-V switch
extensions
Physical NIC
VM NIC
Runtime bandwidth
demand (gigabits
per second)
• Helps guarantee predictable network
performance and fair sharing during congestion
• Supports bandwidth floors and bandwidth caps
• Helps enforce customer SLAs and maximum
pricing caps
• Sets QoS for virtual machine or traffic type
• Uses software built into Windows Server 2012 R2
or hardware capable of Data Center Bridging
(DCB) to assign minimum QoS settings
• Supports dynamic change of QoS settings
through PowerShell without any downtime
Service
Virtual
machine
Reservation
30%
T1
4
T2
4
T3
2
T1
4
T2
T3
3
2
4
Storage
40%
5
5
6
Live
migration
20%
0
3
2
Cluster
Shared
Volume
10%
0.5
1
0
6
5
2
0.5
1
When
bandwidth is
available, each
service takes as
much as it can
When the link
is congested,
each service
takes its fair
share
2
When bandwidth
becomes
available, each
service takes as
much as it wants
stateful
8
Virtual RSS (vRSS)
Dynamic VMQ (DVMQ)
Dynamic NIC teaming
• vRSS provides near line rate to a
VM on existing hardware,
making it possible to virtualize
traditionally network intensive
physical workloads
• Maximizes resource utilization
by spreading VM traffic across
multiple host and guest
processors
• Standard VMQ spreads VMs to
different cores statically
• DVMQ adds or removes cores
as the processing requirements
change
• Results in better processor use
for adaptive network workloads
• TCP streams or "flows” are
generally not continuous
• Groups of packets sent between
flows are called “flowlets”
• Dynamic load balancing detects
breaks in a flow
• Flows can be moved to other team
members on flowlet boundaries to
rebalance traffic
• Dynamic LBFO maximizes
utilization of teamed NICs
RDMA
SR-IOV
• Higher throughput with low latency
through offload
• Take advantage of high-speed networks
such as InfiniBand and iWARP
• Remote storage at the speed of direct
storage
• Compatible with SMB Multichannel for
load balancing and failover
• VM traffic bypasses virtual switch and
performs I/O directly to NIC
• Ideal for high I/O workloads that do not
require port policies, QoS, or network
virtualization enforced at the end host
virtual switch
• Reduce CPU overhead, network latency,
and increase throughput
How network virtualization works
• Overlays multiple virtual networks on
shared physical network
• Uses industry standard General Routing
Encapsulation (NVGRE) protocol
Problems solved
• Creates VM mobility across datacenter,
hoster cloud or Azure without network
constraints
• Provides ability to import customer IP
addresses and network topology
• Helps remove VLAN constraints
• Helps eliminate hierarchical IP address
assignment for virtual machines
Contoso
Fabrikam
Challenges
•
•
Internet
Bridge Between VM Networks
& Physical Networks
Hoster wants to provide isolated networks for tenant
VMs with integral S2S VPN and NAT
Enterprises have virtualized networks split across
different datacenters or virtualized networks (NVGRE
aware) communicating to physical networks (NVGRE
unaware)
Solution
•
•
•
•
•
•
Multi-tenant VPN gateway in Windows Server 2012 R2
Integral multitenant edge gateway for seamless
connectivity
Guest clustering for high availability
BGP for dynamic routes update
Encaps/Decaps NVGRE packets
Multitenant aware NAT for Internet access
Bridge Between VM Networks
& Physical Networks
Challenges
•
Contoso
•
Datacenters need to efficiently pack hosts in different
physical subnets
Enterprises have virtualized networks that need to
communicate with physical networks (NVGRE
unaware)
Solution
•
•
•
•
L3 gateway in Windows Server 2012 R2
Guest clustering for high availability
Encaps/Decaps NVGRE packets
High performance with hardware offloads
Gateway appliances
OMI-based
top-of-rack switch
Hyper-V switch
extensions
Chipset
extensions
FW/NAT
AD
DNS
DHCP
Tenant
VM
WAP+
SPF
VMM
NIC
SQL
NIC
NVGRE
Gateway
SOFS
NIC
NIC
NVGRE
Gateway
NIC
Mgmt NIC
Cluster NIC
VM1
VM2
…
LM NIC
NIC
SMB1
SMB2
SMB3
SMB4
Replica NIC
Recommended teaming modes:
Load balancing mode:
Switch independent or LACP
Hyper-V Port (Hyper-V 2012)
Dynamic (Hyper-V 2012 R2)
Mgmt NIC
Cluster NIC
VM1
VM2
Virtual switch
switch settings
settings
Virtual
…
LM NIC
SMB1
SMB2
SMB3
SMB4
Replica NIC
Physical
adapter
Settings
(Uplink)
Virtual
adapter
High
SMB
VM2
Cluster
LiveReplica
Mgmt
Migration
Settings
Performance
FW/NAT
AD
DNS
DHCP
Tenant
VM
WAP
VMM
NIC
SQL
NIC
NVGRE
Gateway
SOFS
NIC
NIC
NVGRE
Gateway
NIC
NAT
S2S
Red subnet
192.168.0.0/24
VSID 5002
192.168.0.1
VM 1
192.168.0.2
VM 2
192.168.0.3
VM N
192.168.0.4
R
10.254.254.2
GW1 (active)
2.2.2.2 - VPN
2.2.2.100 - NAT
HNV Router
10.254.254.1
HA
Gateway
GW2 (standby)
R
2.2.2.1
Internet
Routing subnet
10.254.254.0/29
VSID 5001
External
2.2.2.0/24
“Red
network”
“MyNetwork” subnet
157.16.1.0/24
157.16.1.1
VM 1
157.16.1.2
VM 2
157.16.1.3
VM N
157.16.0.4
R
HNV Router
10.254.254.1
Routing subnet
10.254.254.0/29
Frontend 157.16.0.0/28
10.254.254.2
GW1 (active)
157.16.0.4
DG: 157.16.0.1
HA
Gateway
GW2 (standby)
157.16.0.1
Physical Router
R
Route 157.16.1.0/24  157.16.0.4
FW/NAT
AD
DNS
DHCP
Tenant
VM
WAP
VMM
NIC
SQL
NIC
NVGRE
Gateway
SOFS
NIC
NIC
NVGRE
Gateway
NIC
Virtual Network
 Extend your datacenter
to Azure by creating VMs
in private networks
 Connect individual
computers to Azure VMs
and virtual networks using
Point to Site connectivity
without VPN device
 Windows inbox gateway to
connect virtual networks in
private cloud and Azure
Site-to-Site
VPN
Subnet 1
VPN
Gateway
On premises
Your datacenter
VPN
Device
Individual computers
behind corporate
firewall
Remote workers
Subnet 2
Subnet 3
DNS
Server
FW/NAT
AD
DNS
DHCP
WAP1
AD
DNS
DHCP
VMM1
NIC
AD
DNS
AD
DNS
DHCP
SQL1
WAP2
NIC
VMM2
AD
DNS
SQL2
Tenant
VM
NIC
AD
DNS
NVGRE
Gateway
NIC
NVGRE
Gateway
NIC
Advancing
Software Defined
Networking
Delivering
Continuously
Available
Applications
Improving
Network
Performance
Simplifying
Datacenter
Network
management
Networking in the
Hybrid Cloud
Solutions
Extend Datacenter Networking with Partner
Download and evaluate System Center 2012 R2
http://www.microsoft.com/en-us/server-cloud/evaluate/trial-software.aspx
Refer to additional System Center 2012 R2 resources
http://www.microsoft.com/systemcenter
System Center marketplace
http://systemcenter.pinpoint.microsoft.com
Check out our blogs
http://blogs.technet.com/server-cloud
For More Information
Windows Server 2012 R2
http://technet.microsoft.com/en-US/evalcenter/dn205286
System Center 2012 R2
http://technet.microsoft.com/en-US/evalcenter/dn205295
Azure Pack
http://www.microsoft.com/en-us/servercloud/products/windows-azure-pack
Microsoft Azure
http://azure.microsoft.com/en-us/
Come Visit Us in the Microsoft Solutions Experience!
Look for Datacenter and Infrastructure Management
TechExpo Level 1 Hall CD
http://channel9.msdn.com/Events/TechEd
www.microsoft.com/learning
http://microsoft.com/technet
http://microsoft.com/msdn