Cloud Scale Performance & Diagnosability Comprehensive SDN Core Infrastructure Enhancements vRSS Remote Live Monitoring NIC Teaming Hyper-V Network Virtualization Hyper-V Switch Hybrid Forwarding Standards based Switch Management Cloud Gateways IPAM for Virtualized Datacenters DNS Enhancements for Service Providers Extended ACLsTest-NetConnection Enhanced HNV Diagnostics

Deliver networking as part of pooled, automated infrastructure Ensure multitenant isolation, scale and performance Expand datacenter capacity seamlessly as per business needs Reduce operational complexity

Abstracting the physical network with virtual networks Spanning policies across physical and virtual networks Controlling datacenter traffic flow Enables software to dynamically manage the network

Multiple virtual networks on a physicalnetworkEach virtual network has illusion it is runningas a physical network How network virtualization works Overlays physical network Encapsulation using NVGRE protocol Physical serverPhysical network Contoso virtual machine Fabrikam virtual machine Contoso networkFabrikam network

Workload Owners Seamless migration to the cloud Move n-tier topology to the cloud Preserve policies, VM settings, IP addresses Enterprises Private Cloud datacenter consolidation and efficiencies Extension of datacenter into hybrid cloud Incremental integration of acquired company network infrastructure Hosters Bring Your own IP Bring Your network topology Scalable multi- tenancy Private/Public Cloud Datacenter Admins Flexible VM placement without reconfiguration Decoupling of server and network admin roles increases agility

Windows Server 2012 R2 HNV is part of the Hyper-V Switch Dynamically learn Customer Addresses Support Hyper-V Clustering Enhanced performance + diagnostics Physical network Contoso networkFabrikam network

Contoso Corp. Fabrikam Corp. Contoso Subnet1 Contoso Subnet3 Contoso Subnet2 Fabrikam Subnet2 Fabrikam Subnet1 Contoso R&D Net Fabrikam HR Net Multi-Tenant Datacenter VM Network VirtualSubnet

Default Gateway Routes between VMs on different Virtual Subnets Built into the HNV Filter running on each host HNV Gateway Required to communicate outside a virtual network Comes in different forms: VPN for Site-to-Site connectivity Load Balancing & NAT for Internet access Forwarding gateway for in datacenter physical machine access Host Datacenter Network Virtualization Fabric Host Internet Fabrikam Corp. Contoso Corp. Multi-tenant VPN Gateway

Different subnets   GRE Key 5001 MAC CA  GRE Key 6001 MAC CA   Customer AddressProvider Address NVGRE Packet VSID

SQL ServerWeb Fabrikam sees Contoso sees SQL ServerWeb SQL Server Web n.n PROVIDER ADDRESS SPACE (PA) CUSTOMER ADDRESS SPACE

HNV is automatically enabled for all adaptorsNew hybrid forwarding in Hyper-V Switch HNV forwards HNV trafficForwarding Extension forwards non-HNV traffic Richer switch extensions Extensions can view CA and PA packets Enables 3 rd party network virtualization Forwarding extensions can modify packet headers onboth ingress and egress pNIC NIC Team vSwitch Extension IngressEgress Native Policies Egress ACL MS Forwarding HNV IngressEgress HNV pNIC NIC Team vSwitch Extension IngressEgress Native Policies Egress ACL MS Forwarding Ingress Egress

pNIC NIC Team vSwitch Native Policies Egress ACL HNV MS Forwarding VM NIC Virtual Machine Extension Ingress Egress

pNIC NIC Team vSwitch Native Policies Egress ACL HNV MS Forwarding VM NIC Virtual Machine Extension Ingress Egress

Broadcast/Multicast support (NEW in R2) Enables new scenarios DHCP in the Virtual Network Host and Guest Clustering Efficient Implementation Uses hardware for PA multicast if configured Administrator don’t generally like to configure PA multicast Falls back to intelligent PA unicast replication Sends only one unicast packet per host no matter how many relevant VMs are on the host Compliant address resolution semantics CA space DAD, NUD and ARP fully supported for IPv4 and IPv6 Reliable ARP proxy Notifies the central policy store of learned IP addresses New CA’s, deletion of CA’s, CA movement Rapid dissemination of HNV routing policy Limited network overhead for disseminating HNV routing policy

Datacenter Network Host 1 Host 2 Provider Address Space (PA) Customer Address Space (CA) Contoso 2 SQL Server Contoso 1 Web Server

Datacenter Network Host 1 Host 2 Provider Address Space (PA) Fabrikam Customer Address Space (CA) Contoso 2 SQL Server Contoso 1 Web Server Fabrikam 1 DHCP Server

Customer Address Space (CA) Datacenter Network Host 1 Host 2 Provider Address Space (PA) Fabrikam Fabrikam DHCP Server Contoso SQL Server Contoso Web Server Fabrikam Fabrikam Web Server

Customer Address Space (CA) Datacenter Network Host 1 Host 2 Provider Address Space (PA) Contoso SQL Server Contoso Web Server Fabrikam DHCP Server Fabrikam Web Server Fabrikam Fabrikam

Customer Address Space (CA) Datacenter Network Host 1 Host 2 Provider Address Space (PA) Contoso SQL Server Contoso Web Server Fabrikam DHCP Server Fabrikam Web Server Fabrikam Fabrikam

HNV + NIC Teaming (NEW in R2) Inbound and outbound spread on virtualized traffic Higher performance with teamed NICs Utilizes LBFO’s new Dynamic Mode Provider Addresses configured with a MAC address *-NetVirtualizationProviderAddress cmdlets updated to take a MAC address Optimal performance when you have 1 (or more) PAs per NIC in the team Ex. A NIC team of 2 NICs should have 2 or more PAs and the CAs spread between them

Higher Is Better 65 % Lower Is Better 80 %

Enhanced Diagnostics with HNV (NEW in R2)

Key Takeaways