1 Hyper-V Architecture, Scenarios And Networking Jeff Woolsey Senior Program Manager Windows...
-
Upload
donavan-budd -
Category
Documents
-
view
214 -
download
2
Transcript of 1 Hyper-V Architecture, Scenarios And Networking Jeff Woolsey Senior Program Manager Windows...
1
Hyper-V Architecture, Scenarios And Networking
Jeff WoolseySenior Program ManagerWindows VirtualizationMicrosoft Corporation
VIR358
2
Objectives And Takeaways
Objective(s)Windows Server 2008 Hyper-V
ArchitectureWhy is there a parent partition?Hyper-V Isolation
Virtualization DemoHyper-V NetworkingHyper-V on Laptops, Demo Configs and ConsiderationsVirtualization Comparison
3
Hyper-V Beta In The Press
“My experience has left me extremely impressed. Windows Server 2008 on large-scale, virtualized enterprise servers will make alternatives a very hard sell.”
- Infoworld
“Microsoft's virtualization has three unique advantages: It costs nothing, its administration is integrated into Microsoft's other server management tools, and Windows Server 2008 is the only host OS it needs to support. In that last case, Windows shops derive a serious performance and scalability kick...”
- Infoworld
“Hyper-V is free as a built-in feature in Server 2008 Standard and ESX Server costs several thousand dollars per copy, depending on the features purchased, so on a pure bang per buck and ease of use basis, it beats ESX and dare I say it – the Xen solutions built into Linux distros – hands down.
- ZDNet
“Even though Hyper-V is still pre-1.0 code, I think Microsoft has done a bang-up job with its hypervisor, and it may just turn this Linux freak into a Windows 2008 junkie for running his own personal virtualization needs.”
- ZDNet
“Yes, jaws actually dropped when it [Hyper-V] was installed in the Test Center.”
- CRN
4
Virtualization In The Industry
5
Virtualization Market TodayComputerworld
“Although virtualization has been the buzz among technology providers, |only 6% of enterprises have actually deployed virtualization on their networks, said Levine, citing a TWP Research report. That makes the other 94% a wide-open market.”
The Rise of the Virtual Machine and the Real Impact It Will Have
“We calculate that roughly 6% of new servers sold last year were virtualized and project that 7% of those sold this year will be virtualized and believe that less than 4% of the X86 server installed base has been virtualized to date.
6
Virtualization 2010
Information Week Oct. 2007
“The [virtualization field] is nowhere near saturated. IDC estimates that only 17% of the worldwide server market will be virtualized by 2010, up from 5% in 2005.”
7
Microsoft IT Going GreenProduction UseVirtual Server in heavy use for 18+ months2,500+ virtual machines~100 new VMs per monthConsolidation Ratios
8 servers to 1 server
Test/Development Savings
Test/Development UseVirtual Server in heavy use for 18+ months500+ virtual machinesConsolidation Ratios16 servers to 1 server
Item Physical System Cost Virtual Server Build Cost Savings
Number of servers required 477 systems @ a cost of $5k each
Total $2.3 million
16 physical host systems @ $20k each
Total: $320 thousand
Just under 2 million dollars
Hard drive space 19 terabytes 8 terabytes 11 terabytes
Rack space 30 racks 2 racks 28 racks
8
Windows Server 2008 Hyper-V
9
Windows Hyper-V Requirements
DescriptionHypervisor based virtualization platformWindows Server 2008 x64 Edition technology
Standard, Enterprise and Datacenter Editions
Hardware Requirementsx64 server with hardware assisted virtualization
AMD AMD-V or Intel VT
Hardware enabled Data Execution Prevention (DEP) requiredAMD (NX no execute bit)Intel (XD execute disable)
Note: Enabling these BIOS features requires powering down (not rebooting) the server to take effect
10
Architecture
11
Windows Server 2008
VSPVSPWindows Kernel
Hyper-V Architecture
Applications Applications Applications
Non-Hypervisor Aware OS
Windows Server 2003, 2008
Windows Kernel VSC
VMBusVMBus EmulationEmulation
“Designed for Windows” Server Hardware
Windows hypervisor
Xen-Enabled Linux Kernel
Linux VSC
Linux VSC
Hypercall AdapterHypercall Adapter
Parent Partition Child Partitions
VM ServiceVM Service
WMI ProviderWMI Provider
VM Worker Processes
OSISV / IHV / OEM
Microsoft Hyper-VMicrosoft / XenSource
User Mode
Kernel Mode
Provided by:
Ring -1
IHV Drivers
VMBusVMBus
VMBusVMBus
Applications
12
Why Not Get Rid Of Parent Partition?
No defense in depthEntire hypervisor running in the most privileged mode of the system
SchedulerMemory ManagementStorage StackNetwork StackVM State MachineVirtualized DevicesDriversManagement API
Hardware
Ring -1
UserMode
KernelMode
UserMode
KernelMode
UserMode
KernelMode Ring 0
Ring 3
VirtualMachin
e
VirtualMachin
e
VirtualMachin
e
13
Micro-kernelized HypervisorDefense in depthUsing hardware to protectHyper-V doesn’t use ring compression, uses hardware assists
Further reduces the attack surface
SchedulerMemory Management
Hardware
VM State MachineVirtualized DevicesManagement API
Ring -1
Storage StackNetwork Stack
Drivers
UserMode
KernelMode
UserMode
KernelMode Ring 0
Ring 3
Parent PartitionVirtualMachin
e
VirtualMachin
e
14
Hyper-VCapabilities
32-bit (x86) & 64-bit (x64) VMsLarge memory support (64 GB) per VMSMP VMs (up to 4 cores)Integrated cluster support for HA & Quick MigrationBitLocker: Seamless, secure data encryptionLive Backup: Volume Shadow Service integrationPass-through disk access for VMsVirtual Machine snapshotsNew hardware sharing architecture (VSP/VSC/VMBus)
Disk, networking, input, videoRobust networking: VLANs and NLBDMTF standard for WMI management interfaceSupport for Full or Server Core installations
15
Windows Server CoreServer Core: New minimal installation option
Provides essential server functionalityCommand Line Interface only, no GUI Shell
BenefitsLess code results in fewer patches and reduced servicing burdenLow surface area server for targeted rolesMore secure and reliable with less management
16
Security
IsolationNo sharing of virtualized devicesSeparate VMBus instance per vm to the parent No sharing of memory
Each has its own address spaceVMs cannot communicate with each other, except through traditional networkingGuests can’t perform DMA attacks because they’re never mapped to physical devicesGuests cannot write to the hypervisorParent partition cannot write to the hypervisor
17
Hyper-V RC0It Just Works
TAP, RDP & MSIT Hyper-V DeploymentsThousands of Hyper-V VMs in PRODUCTIONWindows Server 2003/2008 Roles:
File, Print, AD, RODC, IIS/Web, TS, Application Services, DHCP, DNS, WSS and more…
Microsoft Server ProductsSQL, Exchange, HPC, ISA, Sharepoint, Project Server, VSTS, Configuration Manager, Ops Manager, VMM & more…
Hyper-V StatsPerformance Blockers: ZERODeployment Blockers: ZEROApplication Compatibility Bugs: ZEROScalability Blockers: ZERO
18
Hyper-V Demo
Mike SterlingProgram ManagerWindows VirtualizationMicrosoft Corporation
19
Hyper-V Networking
20
Hyper-V Networking
Two physical network adapters at minimum
One for managementOne (or more) for VM networkingDedicated NIC(s) for iSCSIConnect parent to back-end management network
Only expose guests to internet traffic
21
Hyper-V Network Configurations
Example 1Physical Server has 4 network adaptersNIC 1: Assigned to parent partition for managementNICs 2/3/4: Assigned to virtual switches for virtual machine networkingStorage is non-iSCSI such as
Direct attachSAS or Fibre Channel
22
Hyper-V Setup And Networking 1
23
Hyper-V Setup And Networking 2
24
Hyper-V Setup And Networking 3
Windows Server 2008
Each VM On Its Own Switch…
VM 2VM 1
“Designed for Windows” Server Hardware
Windows hypervisor
VM 3
Parent Partition Child Partitions
User Mode
KernelMode
Ring -1MgmtNIC 1MgmtNIC 1
VSwitch 1NIC 2
VSwitch 1NIC 2
VSPVSPVSPVSPVSPVSP
VSwitch 2NIC 3
VSwitch 2NIC 3
VSwitch 3NIC 4
VSwitch 3NIC 4
Applications Applications Applications
VM ServiceVM Service
WMI ProviderWMI Provider
VM Worker Processes
Windows Kernel VSC Windows
KernelVSC Linux
Kernel VSC
VMBusVMBus VMBusVMBus VMBusVMBusVMBusVMBus
26
Hyper-V Network Configurations
Example 2Server has 4 physical network adaptersNIC 1: Assigned to parent partition for managementNIC 2: Assigned to parent partition for iSCSINICs 3/4: Assigned to virtual switches for virtual machine networking
27
Hyper-V Setup, Networking And iSCSI
Windows Server 2008
Now With iSCSI…
VM 2VM 1
“Designed for Windows” Server Hardware
Windows hypervisor
VM 3
Parent Partition Child Partitions
User Mode
KernelMode
Ring -1MgmtNIC 1MgmtNIC 1 iSCSI NIC 2iSCSI NIC 2
VSPVSPVSPVSP
VSwitch 1NIC 3
VSwitch 1NIC 3
VSwitch 2NIC 4
VSwitch 2NIC 4
Applications Applications Applications
VM ServiceVM Service
WMI ProviderWMI Provider
VM Worker Processes
Windows Kernel VSC Windows
KernelVSC Linux
Kernel VSC
VMBusVMBus VMBusVMBus VMBusVMBusVMBusVMBus
29
NetworkingParent Partition
30
NetworkingVirtual Switches
31
VM With Legacy And Synthetic NIC
32
Don't forget The ICs!Emulated versus VSC
33
Hyper-V Laptops And Demo Configs And Consideration
34
Hyper-V And Laptops
No support for wireless networkingCan’t sleep/hibernate systemUse multiple spindles
Disk for systemDisk for virtual machines
Intel Note: Santa Rosa Chipset and laterSupports 4 GB and greater
35
Disk 1, Partition 1: ~70 GBDisk 1, Partition 1: ~70 GB
Vista SP1 RTMVista SP1 RTM
Hyper-V Laptop Configuration
Disk 2, Partition 1: ~65 GBDisk 2, Partition 1: ~65 GB
Virtual MachinesVirtual Machines
LaptopLaptop
Disk 1: Two PartitionsDisk 1: Two PartitionsVista SP1 & Windows 2008Vista SP1 & Windows 2008
Disk 2: Two PartitionsDisk 2: Two PartitionsVMs & StorageVMs & Storage
Disk 1, Partition 2: ~24 GBDisk 1, Partition 2: ~24 GB
Windows Server 2008 x64 Windows Server 2008 x64 EditionEdition
Disk 2, Partition 2: ~84 GBDisk 2, Partition 2: ~84 GB
StorageStorageISOsISOs
36
Inexpensive Dev/Demo System
Single Proc Quad Core2.4 GHz300 GB DriveDVD-RW Burner1 Gb NIC$700
8 GB DDR2 800 MHz$150
2 500 GB SATA disks$200 ($99 x 2)
Total: $1050
37
Creating Virtual Machines
Steps1. Create virtual machine2. Install guest operating system3. Install integration components4. Install anti-virus5. Install management agents6. SYSPREP7. Add it to the SCVMM LibraryWindows Server 2003
Create vms using 2-way to ensure an MP HAL
38
Microsoft System Center
39
System Center
Virtual machine managementVirtual machine managementServer consolidation and resource Server consolidation and resource utilization optimizationutilization optimizationConversions: P2V and V2VConversions: P2V and V2V
Patch management and deploymentPatch management and deploymentOS and application configuration OS and application configuration managementmanagementSoftware upgradesSoftware upgrades
Live host level virtual machine backupLive host level virtual machine backupIn guest consistencyIn guest consistencyRapid recoveryRapid recovery
End to end service managementEnd to end service managementServer and application health Server and application health monitoring and managementmonitoring and managementPerformance reporting and analysisPerformance reporting and analysis
40
What About…Heterogeneous Virtualization ManagementPhysical to Virtual Conversion (P2V)Virtual to Virtual Conversion (V2V)
Virtual Server to Hyper-VVMware to Hyper-V
Virtual Machine LibraryPowerShell ScriptingDelegated AdministrationVirtual Machine AuthoringVM Templates/CloningFailover Cluster Integration
41
Virtualization Comparison
42
Virtual Server 2005 versus Hyper-V
43
Microsoft Virtualization…
Microsoft Provides a Multilevel ApproachMicrosoft Provides a Multilevel ApproachInfrastructureManagementApplicationsInteroperability
ManagementManagement Unified Physical and Virtual
Virtual MachinesVirtual Only
Migration Quick MigrationWAN Disaster Recovery
Live Migration ($$)Local Disaster Recovery ($$)
Guest Multi-processing 2/4-core support (free) 2/4-core ($$)
Large Memory Support 64 GB per VM 64 GB per VM
Architecture Support x86 & x64 x86 & x64
Hyper-VVMWare
ESX 3.5 Server
44
20082008
Microsoft RoadmapWindows® Server RTM Hyper-V Release
Within 180 days of Windows Server 2008 RTMSystem Center Virtual Machine Manager 2008System Center Virtual Machine Manager 2008 Beta
Adds support for managing Hyper-VAdds support for managing VMware
Windows® Server Hyper-V RCWindows Server Hyper-V Beta
With Windows Server 2008 RTM
System Center Virtual Machine Manager 2007Support for Virtual Server
System Center Operations Manager 2007System Center Configuration Manager 2007System Center Data Protection Manager 2007Virtual Server R2 SP1
NowNow
45
Microsoft Virtualization APIs
Virtual Server COM Interfacehttp://msdn2.microsoft.com/en-us/library/bb309134(VS.85).aspx
Virtual Hard Disk Formathttp://www.microsoft.com/windowsserversystem/virtualserver/techinfo/vhdspec.mspx
Beta Hyper-V WMI Provider APIshttp://msdn2.microsoft.com/en-us/library/cc136992(VS.85).aspx
Beta Hyper-V Hypercall Interfacehttp://www.microsoft.com/downloads/details.aspx?FamilyId=91E2E518-C62C-4FF2-8E50-3A37EA4100F5&displaylang=en
46
Online ResourcesMicrosoft Virtualization Home
http://www.microsoft.com/virtualization
Windows Server Virtualization Blog Sitehttp://blogs.technet.com/virtualization/default.aspx
Windows Server Virtualization TechNet Sitehttp://technet2.microsoft.com/windowsserver2008/en/servermanager/virtualization.mspx
Windows Server 2008 Hyper-V Release Candidatehttp://support.microsoft.com/kb/949219
Windows Server 2008 Hyper-V RC Installation Guidehttp://www.microsoft.com/windowsserver2008/en/us/hyperv-install.aspx
System Center Virtual Machine Manager 2008 Betahttp://connect.microsoft.com
47
www.microsoft.com/teched Tech·Talks Tech·Ed BloggersLive Simulcasts Virtual Labs
http://microsoft.com/technet
Evaluation licenses, pre-released products, and MORE!
Resources for IT Professionals
Resources
For virtualizationEventsWhitepapersDownloadsCase Studies
Visit: www.microsoft.com/virtualization
1 Year 1 Year Subscription!Subscription!
Complete anComplete anevaluation evaluation ononCommNet CommNet andandenter to win!enter to win!
51
© 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after
the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.