The Journey so Far The Road Ahead Cloud Scale Performance and Diagnosability Comprehensive SDN Core Infrastructure Enhancements

NIC Teaming DHCP failover Private virtual local area network (PVLAN) Hyper-V Network Virtualization SIMPLIFIED MULTITENANT INFRASTRUCTURE OPERATIONAL EFFICIENCY RICHER ECOSYSTEM CONTINUOUS APPLICATION AVAILABILITY Cross-premises connectivity Hyper-V Extensible Switch Hardware partners SMB 3.0 Multichannel Quality of Service (QoS) HIGH-PERFORMANCE NETWORKING SMB Direct Single Root I/O Virtualization (SR-IOV) Receive-Side scaling (RSS) Receive Segment Coalescing (RSC) Dynamic Virtual Machine Queue (D-VMQ) IP Address Management (IPAM) Resource Metering Microsoft Windows PowerShell BranchCache DirectAccess DHCP failover

Cutting Costs Maximal utilization of existing resources No specialized equipment Choice and Flexibility matter Plug and Play amongst multiple vendors Any tenant VM deployed in any cloud Agility and Automation are key Automation for the hoster and tenant networks Including core infrastructure services

Cloud Scale Performance & Diagnosability Comprehensive SDN Core Infrastructure Enhancements vRSS Remote Live Monitoring NIC Teaming Hyper-V Network Virtualization Hyper-V Switch Hybrid Forwarding Standards based Switch Management Cloud Gateways IPAM for Virtualized Datacenters DNS Enhancements for Service Providers Extended ACLsTest-NetConnection Enhanced HNV Diagnostics

Host VP3 Host VP1Host VP2 Host VP0 vProc Windows Server 2012 VMs restricted to 1 processor for network trafficprocessing Windows Server 2012 R2 vRSS maximizes resource utilization by spreadingnetwork traffic across multiple virtual processors Now possible to virtualize traditionally networkintensive physical workloads Requires no hardware upgrade and works withany NICs that support VMQ vRSS provides near line rate to a VM on existing hardware, making it possible to virtualize traditionally network intensive physical workloads VMNIC Physical NIC

Windows Server 2012 Provides network fault tolerance andcontinuous availability Aggregates bandwidth from multiplenetwork adapters Windows Server 2012 R2 Introduces a new mode, Dynamic mode. Balances based on flowlets Optimized utilization of a team onexisting hardware Virtual adapters Team network adapter Operating system Dynamic NIC Teaming optimizes utilization of a team on existing hardware, thereby maximizing ROI

NIC Team Windows Server 2012 TCP/IP Stack Windows Server 2012 R2 TCP/IP Stack NIC Team

ACL s Windows Server 2012 Enabled traffic to be allowed/blockedbased on source and destination VM Windows Server 2012 R2 Allows or blocks traffic for specificworkloads Filter traffic based on: Network address Application port Protocol type S tateful packet inspection Parent Partition Extension C Extension D Extension A Virtual Switch Capture Extensions Filtering Extensions Forwarding Extension Physical NIC VMNIC Virtual Machine Extension Miniport Extension Protocol

Remote Live Monitoring provides remote packet and ETW event capture from any host in the datacenter, enabling low-touch diagnostics at high scale Server or client with Microsoft Message Analyzer Windows Server 2012 R2 WMI to configure the filters and truncation WMI starts/stops the session Truncated network traffic redirected ETW events Windows Server 2012 Remote monitoring of network traffic isnot simple Windows Server 2012 R2 Mirror and capture network traffic for remote and local viewing GUI experience with Message Analyzer Supports remote offline traffic captures Filtering based on IP addresses and VMs

Hyper-V Network Virtualization Hyper-V Extensible Switch Partner extensions System Center 2012 Virtual Machine Manager Partner extensions Hyper-V Extensible Switch Hyper-V Network Virtualization Network switch management Built-in Software gateways System Center 2012 R2 Virtual Machine Manager Open, extensible & standards-basedBuilt-in and production ready Innovation in software and hardware

How network virtualizationworks Overlays physical network Encapsulation using NVGRE protocol Problems solved VM mobility across datacenter, hoster cloud or Azure Ability to import customer IP addresses and network topology Physical serverPhysical network Contoso virtual machine Fabrikam virtual machine Contoso networkFabrikam network FlexibilityControlAutomation

SQL ServerWeb Fabrikam sees SQL ServerWeb Contoso sees SQL Server Web n.n PROVIDER ADDRESS SPACE (PA) CUSTOMER ADDRESS SPACE Dynamically Learned CustomerAddresses Highly available Windows gateways, hosts, VMs Performance Improvements NIC Teaming Integration NVGRE Task Offload Enabled NICs Enhanced diagnostics of virtualnetworks

Host NIC Parent Partition Extension C Extension D Extension A Extension Miniport Extension Protocol Virtual Switch Capture Extensions Filtering Extensions Forwarding Extension VM NIC Virtual Machine Physical NIC Benefits Open platform to fuel plug-ins Free core services Reliability and quality Unified management Easier to support

Introduces new hybrid forwarding HNV forwards HNV trafficForwarding Extension forwards non-HNV traffic Richer switch extensions Extensions can view CA and PA packets Enables 3 rd party network virtualization Forwarding extensions can modify packet headers onboth ingress and egress pNIC NIC Team vSwitch Extension IngressEgress Native Policies Egress ACL MS Forwarding HNV IngressEgress HNV pNIC NIC Team vSwitch Extension IngressEgress Native Policies Egress ACL MS Forwarding Ingress Egress

Communicating using WS-MAN FlexibilityControlAutomation OMI How switch managementworks Standards-based CIM model Switches running Open ManagementInfrastructure (OMI) Switch Management PowerShell Cmdlets Problems solved Common management interface across multiple network vendors A utomate common network management tasks Logo Program enables customers to find/buy switches that “just work”

Challenges Hoster wants to provide isolated networks for tenant VMs with integrated S2S VPN and NAT Enterprises have virtualized networks split across different datacenters or virtualized networks communicating to physical networks Solution Multitenant aware VPN for Site-to-Site connectivity Multitenant aware NAT for Internet access Forwarding gateway for in datacenter physical machine access Host Datacenter Network Virtualization Fabric Host Internet Fabrikam Corp. Contoso Corp. Multi-tenant VPN Gateway FlexibilityControlAutomation

App Server Blue Red Hosted CloudRemote Site Host

IP Address Management (IPAM) 28 IPAM distributed architecture Domain europe.corp.woodbridge.com IPAM Server (UK) DHCP, DNS, DC, and NPS servers IPAM Server (Bangalore) DHCP, DNS, DC, and NPS servers Domain fareast.corp.woodbridge.com IPAM Server (Hyderabad) DHCP, DNS, DC, and NPS servers Site: Hyderabad Branch office Site: Bangalore Branch office Site: UK Branch office IPAM server (Redmond) DHCP, DNS, DC, and NPS servers Site: Redmond Head office Windows Server 2012 Inbox feature for integrated managementof IP addresses, domain names, anddevice identities Tightly integrates with Microsoft DNS andDHCP servers Provides custom IP address space display,reporting, and management Audits server configuration changes andtracks IP address use Monitors and manages specific scenario-based DHCP and DNS services

IP Address Management (IPAM) Windows Server 2012 R2 Manages virtual address space in addition to physical address space Imports and exports network configurationsautomatically through plugin for System CenterVirtual Machine Manager Enables synchronization of Active DirectorySites and subnets information with IPAM Lets admins define user roles, access scope andaccess policy through role-based access control Hoster friendly DNS monitoring that providesper zone statistics Data collection tasks WCF Network Administrator Fabric Administrator System Administrator Forensics Investigator Security Groups Enable cost-effective connectivity and network automation in virtualized private, hoster, and hybrid cloud deployments

Cloud Scale Performance & Diagnosability Comprehensive SDN Core Infrastructure Enhancements vRSS Remote Live Monitoring NIC Teaming Hyper-V Network Virtualization Hyper-V Switch Hybrid Forwarding Standards based Switch Management Cloud Gateways IPAM for Virtualized Datacenters DNS Enhancements for Service Providers Extended ACLsTest-NetConnection Enhanced HNV Diagnostics