Presentation is loading. Please wait.

Presentation is loading. Please wait.

Ravi Rao Senior Program Manager Microsoft Corporation WSV303.

Similar presentations

Presentation on theme: "Ravi Rao Senior Program Manager Microsoft Corporation WSV303."— Presentation transcript:


2 Ravi Rao Senior Program Manager Microsoft Corporation WSV303

3 Agenda Problem background Solution modes Deployment Demo Deep Dives Content Identification Integration architecture Security End to end flow Partners Resources

4 Problem Background Thin, expensive WAN links between main office and branch offices High link utilization Poor application responsiveness Trend towards data centralization

5 Customers Say… “We are improving the efficiency of our branch offices and saving bandwidth by using BranchCache in Windows Server 2008 R2 and Windows 7,” said Lukas Kucera, IT services manager of Lukoil CEEB, one of the largest integrated oil and gas companies in the world. “Some of our smaller facilities, such as the office in Slovakia and the storage terminal in Belgium, have just five to 10 users, so it’s not efficient to deploy a file server on-site, but it consumes bandwidth to have them continually accessing files from the main servers. BranchCache is the perfect solution.” “Taking advantage of the BranchCache feature in Windows Server 2008 R2, we can spend $20,000 rather than $50,000 per year on bandwidth by postponing our expansion schedule.” David Feng, IT Director, Sporton International Convergent Computing (CCO) wanted to improve remote network access for its mobile users. Using the DirectAccess and BranchCache™ features in Windows Server® 2008 R2 and Windows 7, CCO has simplified remote connection to its network and sped the downloading of important files. It has cut costs by eliminating its virtual private network and has seen a 43 percent savings in wide area network (WAN) bandwidth.

6 Solution Tenets Optimized Distributed – retrieve from other clients in the branch Centralized – retrieve from a “hosted cache” in the branch Secured Client can only retrieve content locally if authorized by the content server All data transfers in the branch are encrypted End to End Maintains protocol integrity Benefits from protocol optimizations Optimizes SSL, IPsec, SMB signing, HTTP, SMB

7 Get ID Get Data Distributed Cache Get ID Data

8 Get ID Put Data Hosted Cache Get Data ID Search Get Search Request Offer ID Data ID Data

9 Hosted Cache Centralized cache of data downloaded by the branch The Hosted cache on Windows Server 2008 R2 provides the following features A centralized cache for Protocols: HTTP, SMB E2E encrypted/signed traffic: SSL, IPsec, SMB signing etc Does not “modify” protocols; benefits from protocol optimizations Configurable size/location/persisted across reboots/flush-able Works across multiple subnets Admins can seed content by writing custom scripts Can be a virtual workload in an appliance Easy to deploy; clients are configured via policy

10 Recommended for larger branches Cache stored centrally: can use existing server in the branch Cache availability is high Enables branch-wide caching Hosted Cache vs. Distributed Enterprise Recommended for branches without any infrastructure Easy to deploy: Enabled on clients through Group Policy Cache availability decreases with laptops that go offline

11 Overall Framework IE HTTP BranchCache™ SMB Expl orer 3 rd Party Applications Robo copy Office WMP BITS Office Share Point AppV

12 Deployment

13 Distributed HQ: Content Server (must run R2) Branch: Client (must run Win 7 or R2) Hosted HQ: Content Server (must run R2) Branch: Hosted Cache (must run R2) Branch: Client (must run Win 7) Works on Server Core R2 as well!

14 Deployment - Content server HTTP server (IIS) - Install the BranchCache feature from Server Manager SMB server (File server) – Install the BranchCache role service feature within the file server role using Server Manager That’s it…

15 Deployment - Client Identify the “branch” An Active Directory Site An IP address range A collection of specific client computers Choose how to deploy Group Policy netsh Deploy to clients! Group policy: Use built-in ADMX files netsh: Run netsh branchcache set service distributed on all relevant clients

16 Deployment – Hosted Cache Setup the hosted cache Install the BranchCache feature on an R2 server Install a server-auth certificate for use with SSL Run netsh branchcache set service hostedserver on the hosted cache Identify Branch Choose how to deploy Deploy to clients! Group policy: Use built-in ADMX files netsh: Run netsh branchcache set service hostedclient location=<> on all clients

17 IIS File Server Group Policy Management Install BranchCache™ feature on an R2 server Group Policy to enable clients Hosted Cache Optionally, install a hosted cache in your branch Deployment - Summary

18 Additional configuration options Enable / disable distributed cache mode Enable / disable hosted cache mode Set the cache size Set the location of the hosted cache Clear the cache Create and replicate a shared key for use in a server cluster And more … Works in domains and workgroups

19 Monitoring Event logs - Operational logs & Audit logs Perfmon counters - Client, hosted cache and Content Server netsh for querying the infrastructure for | potential problems Cache size too small, firewall issues, certificate problems etc SCOM pack - for rolling all the information up

20 BranchCache in Action Devrim Iyigun Senior Product Manager Microsoft Corporation

21 Going Deeper…

22 Content Identifiers S1S1S2S2S3S3 B1B1B1B1 B1B1B1B1 B2B2B2B2 B2B2B2B2 B1B1B1B1 B1B1B1B1 B2B2B2B2 B2B2B2B2 BnBnBnBn BnBnBnBn B1B1B1B1 B1B1B1B1 B2B2B2B2 B2B2B2B2 BnBnBnBn BnBnBnBn Content Segments Unit of discovery Blocks Unit of download Hashes Returned by server Segment hashes, Block hashes up to ~2000x data reduction BnBnBnBn BnBnBnBn

23 HTTP Integration http.sys IIS BranchCa che wininet Open URL “Branch Cache Capable” Get data Data H1H2H4H5 Hashlist Data H3 BranchC ache IE

24 SMB Integration SMB Server Driver SMB Server Driver SMB Hash Generation Service HashGen Utility Generate or update hash Application CSC Driver SMB Client Driver CSC Cache Hashlist CSC Service Branch Cache Data Hashlist Request Hashes ReadFile Data Prefetch File Data Access hashes Save hashes Request Hashes Hashlist

25 How is SSL Optimized? SocketsSockets SSLSSL HTTPHTTP IEIE Branch Cache Data encrypted Data in clear Client Server Data encrypted IPsecIPsec SocketsSockets SSLSSL HTTPHTTP IISIIS Data in clear IPsecIPsec Data encrypted

26 Security B1B1B1B1 B1B1B1B1 B2B2B2B2 B2B2B2B2 BnBnBnBn BnBnBnBn Blocks Block hashes Hash(block) Segment hash (SH) Hash (Blockhashes) Server secret key Ks Private Segment key (SK) Hash(SH, Ks) Encryption key Hash(SK, “KeKeKe”) Segment discovery key Hash(SK, SH+”HoHoDk”) Client Server

27 Flow – a Security View Client requests data from the server, and indicates BranchCache capability Server authorizes the client Server retrieves metadata (block hashes, segment hashes, private segment key) for the data Server sends metadata on same channel as data Client computes a segment discovery key Broadcasts on the local network

28 Flow, Continued Serving clients receive the broadcast Decrypt the segment hash from the segment discovery key Respond with data availability Client requests blocks from the serving client Serving client computes encryption key from the segment private key Serving client encrypts each block with the encryption key Client receives the data Decrypts the data Validates block data against the block hash If valid, returns to application

29 Security of Data at Rest Clients Cache only contains content requested by the client Data in cache ACL’d so that it is only accessible if authorized by the server If data leakage is a concern, then use BitLocker or EFS Hosted Cache Cache contains content requested by all branch clients Use BitLocker or EFS to encrypt cache as necessary All data can be purged from the cache using netsh

30 BranchCache Ecosystem Partners

31 Steelhead Appliance RSP VM Virtualization Layer VM Riverbed and Microsoft to extend optimization further for Windows 7 users with BranchCache Microsoft and Riverbed - Better Together Joint Optimization Solution for Windows 7 users Riverbed Steelhead: Leading WAN optimization solution + BranchCache Leader in the Gartner magic quadrant Accelerate applications: CIFS, MAPI, HTTP/S, TCP, and all other key protocols Cut bandwidth use: Save 65 – 95% of WAN utilization POLP Licensing Partner, and Windows OEM Deliver Windows to the branch with the Riverbed Services Platform (RSP): Offer Windows services such as AD, Streaming, Print, DNS and BranchCache Visit Booth 247 for more info

32 Blue Coat – BranchCache Support About Blue Coat Application Delivery Network Vendor ProxySG for WAN Optimization & Secure Web Gateway Leader in Gartner Magic Quadrants Secure Web Gateway, Sep 2008 WAN Optimization Controllers, Nov 2007 Blue Coat will support BranchCache protocols Blue Coat will license Hosted Cache protocols on ProxySG Edge site hosted cache for SMB2, SMB signed & IPsec Core site proxy for legacy content servers (non-WS 2008 R2) Remote Office Data Center ProxySG

33 F5 and BranchCache F5 is a player in Application Delivery Networking, with the mission of building network devices that support your applications, ensuring high availability, scalability, performance and security. BranchCache adds to BIG-IP’s WAN acceleration portfolio See a demo of BranchCache on the BIG-IP 6900 – visit booth 311

34 New Generation Application Delivery Platform Application Acceleration & Load Balancing BranchCache Augments AX Native Optimized Caching

35 BranchCache: Enhancing the Windows File Experience Delivering best-in-class Windows® files services solution Thousands of joint customers using SMB (CIFS) today Use ranges from home directories to high performance engineering applications Now also supporting SMB 2.0 BranchCache — NetApp® as a Content Server Bring remote Windows users closer Save on bandwidth and remote administration NetApp is a gold sponsor – visit their booth! Branch office / remote users NetApp NAS in the data center

36 Symantec Support for BranchCache Symantec World’s 4th largest ISV… Found in almost as many Windows environments as Microsoft Security, Storage, HA, Backup, Archiving, Data Loss Prevention, Management… Altiris Server Management Suite from Symantec Provide support for monitoring BranchCache on Windows Server 2008 R2 Provide alerting when problems are detected Orchestrate and automate remediation when necessary Branch Corp HQ data center Altiris Server Management Suite From Symantec

37 Site to Site VPN Forefront Threat Management Gateway in the Branch Web Proxy & Cache Featuring Anti-Virus Anti-Virus URL Filtering URL Filtering HTTPS Inspection HTTPS Inspection Network Intrusion Inspection Network Intrusion Inspection Web Proxy & Cache Featuring Anti-Virus Anti-Virus URL Filtering URL Filtering HTTPS Inspection HTTPS Inspection Network Intrusion Inspection Network Intrusion Inspection Single Host for TMG & BranchCache (Hosted Cache) Standard deployment Enterprise Management Enterprise Management Running on Windows Server 2008 R2 Running on Windows Server 2008 R2 Enterprise Management Enterprise Management Running on Windows Server 2008 R2 Running on Windows Server 2008 R2

38 To Summarize BranchCache™ reduces WAN bandwidth consumed by end users for intranet based HTTP and SMB traffic and improves end user experience BranchCache™ accelerates delivery of encrypted and signed content such as when using HTTPS, IPsec, SMB signing and at the same time ensures authorization of users by the server at the central office. BranchCache™ doesn’t require additional equipment in the branch offices and can be easily managed using existing systems management technology such as group policy BranchCache has a vibrant and growing ecosystem giving customers the choice to pick a solution that works best for their needs

39 Resources Website/TechNet Email At TechEd, we have booths in the TLC Orange Area Windows Server Branch Office Solutions - BranchCache Windows Services for the Branch – Partner Solutions

40 Sessions On-Demand & Community Resources for IT Professionals Resources for Developers Microsoft Certification and Training Resources Microsoft Certification & Training Resources Resources

41 Related Content Breakout Sessions WSV 403: Enhancing the Branch office experience with Windows Server 2008 R2 Hands-on Labs WSV14-HOL: Windows Server 2008 R2 - BranchCaching

42 Windows Server Resources Make sure you pick up your copy of Windows Server 2008 R2 RC from the Materials Distribution Counter Learn More about Windows Server 2008 R2: Technical Learning Center (Orange Section): Highlighting Windows Server 2008 and R2 technologies Over 15 booths and experts from Microsoft and our partners Over 15 booths and experts from Microsoft and our partners

43 Complete an evaluation on CommNet and enter to win!

44 © 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Download ppt "Ravi Rao Senior Program Manager Microsoft Corporation WSV303."

Similar presentations

Ads by Google