1. Windows Server 2012 R2 JumpStart: What’s New in Windows Server 2012 R2 Preview Rick Claus Microsoft Sr. Technical Evangelist Corey Hynes Lead Technical Architect, holSystems

2. Day 1 Introducing Windows Server 2012 R2Server Virtualization in Windows Server 2012 R2Cloud Optimized Networking in Windows Server 2012 R2Storage in Windows Server 2012 R2 Day 2 Server Management & Automation with Windows Server 2012 R2 VDI with Windows Server 2012 R2Access & Information Protection with Windows Server 2012 R2Web Application & Platform with Windows Server 2012 R2 Cloud Optimized Networking in Windows Server 2012 R2

3. DOWNLOAD Windows Server 2012 R2 Preview aka.ms/ws2012r2 #WS2012R2JS DOWNLOAD System Center 2012 R2 Preview aka.ms/sc2012r2 Hands-On Labs Talk with our Experts in Chat tool. http://www.microsoftvirtualacademy.com System Center 2012 R2 Jumpstart July 15 th - http://aka.ms/SCR2JS

4. Advancing Software Defined Networking Simplifying Datacenter Network management Improving Network Performance Delivering Continuously Available Applications 4 Networking in the Hybrid Cloud

5. 5 Delivering Continuously Available Applications Advancing Software Defined Networking Hyper-V Extensible Switch Hyper-V Network Virtualization DHCP FailoverSMB Multichannel Quality of Service Simplifying Datacenter Network Management IP Address Management (IPAM) Remote Live capture Network Management using Virtual Machine Manager Network Monitoring using Operations Manager Microsoft Windows PowerShell Networking in the Hybrid Cloud Extending to Azure Extending to Service Providers Cross premise connectivity Improving Network Performance vRSS Single Root I/O Virtualization (SR-IOV) NIC Teaming SMB Direct (RDMA) Dynamic VMQ Inbox HNV Gateway Virtual Machine Manager Enhancements

6. Open, Extensible and Standards based Built-in and production ready Innovation in software and hardware Hyper-V Network Virtualization Hyper-V Extensible Switch 6 Inbox Gateway Management with System Center Virtual Machine Manager

7. 7 BACKGROUND Network virtualization lags behind compute and storage Administration within the data center may be soiled THE CHALLENGES Physical network configuration is not flexible Workloads tied to underlying hardware configurations Configuration changes are manual and cumbersome Diverse network infrastructure requires vendor-specific management and control Greater VM mobility and density difficult to achieve VLAN tags Aggregation Switches VMs ToR

8. 8 Enables software to dynamically manage the network by: Enabling integrated policies that span physical and virtual networks Abstracting workloads from the physical network Controlling datacenter traffic flow

9. Host NIC 9 Hyper-V Extensible Switch architecture Extends virtual switch functionality by addingswitch extensions Provides open platform supporting third-partyplug-ins to add functionality Lets customers manage virtual network thesame way they would manage a physicalnetwork Helps monitor the security of virtual machineto virtual machine traffic Provides unified management andenforcement of plug-ins with Virtual MachineManager across entire datacenter Includes NDIS filter drivers, WFP calloutdrivers, Ingress filtering, Destination lookupand forwarding and Egress filtering extensions Parent Partition Extension C Extension D Extension A Extension Miniport Extension Protocol Virtual Switch Capture Extensions Filtering Extensions Forwarding Extension VM NIC Virtual Machine Physical NIC

10. Host NIC 10 Hyper-V Extensible Switch architecture Parent Partition Extension C Extension D Extension A Extension Miniport Extension Protocol Virtual Switch Capture Extensions Filtering Extensions Forwarding Extension VM NIC Virtual Machine Physical NIC Key Features Extension monitoring & uniqueness Extensions that learn VM life cycle Extensions that can veto state changes Multiple extensions on same switch Several Partner Solutions Available Cisco – Nexus 1000V & UCS-VMFEX NEC – ProgrammableFlow PF1000 5nine – Security Manager InMon - SFlow Build Extensions for Capturing, Filtering & Forwarding

11. How network virtualization works Overlays multiple virtual networks onshared physical network Uses industry standard General RoutingEncapsulation (NVGRE) protocol Problems solved Creates VM mobility across datacenter, hoster cloud or Azure without network constraints Provides ability to import customer IP addresses and network topology Helps remove VLAN constraints Helps eliminate hierarchical IP address assignment for virtual machines 11 Physical serverPhysical network Blue virtual machine Yellow virtual machine Blue networkYellow network

12. Tenants with overlapping IP Address range share same physical network Policies enforced at host level using PowerShell or System Center Virtual Machine Manager DHCP servers can be part of virtualized network to enable locally assigned IP addresses Supports guest clustering SQL ServerWeb Orange sees SQL ServerWeb Blue sees SQL Server Web 192.168.2.12192.168.1.10 10.1.1.1192.168.1.10 10.1.1.2192.168.2.12 What’s really happening 192.168.n.n PROVIDER ADDRESS SPACE (PA) 10.1.1.2 10.1.1.1 10.1.1.2 CUSTOMER ADDRESS SPACE 10.1.1.1192.168.1.10 10.1.1.2192.168.2.12 10.1.1.1 10.1.1.2 10.1.1.110.1.1.2 12

13. IP Virtualization Policy Enforcement Routing Hyper-V Switch VSID ACL Enforcement Network Virtualization Packet Flow Blue 1 sending to Blue 2 Network Virtualization ARP TABLE 34:29:af:c7:d9:12 10.10.10.11 34:29:af:c7:d9:12 IP Virtualization Policy Enforcement Routing Hyper-V Switch VSID ACL Enforcement Network Virtualization

14. IP Virtualization Policy Enforcement Routing Hyper-V Switch VSID ACL Enforcement Network Virtualization IP Virtualization Policy Enforcement Routing Hyper-V Switch VSID ACL Enforcement Network Virtualization Network Virtualization Packet Flow Blue 1 sending to Blue 2 MAC B1 -> MAC B2 10.10.10.10 -> 10.10.10.11 5001MAC B1 -> MAC B2 10.10.10.10 -> 10.10.10.11 MAC P1 -> MAC P2 192.168.2.10 -> 192.168.5.12 5001 MAC B1 -> MAC B2 10.10.10.10 -> 10.10.10.11

15. Challenges Hoster wants to provide isolated networks for tenant VMs with integral S2S VPN and NAT Enterprises have virtualized networks split across different datacenters or virtualized networks (NVGRE aware) communicating to physical networks (NVGRE unaware) Solution Multi-tenant VPN gateway in Windows Server 2012 R2 Preview Integral multitenant edge gateway for seamless connectivity Guest clustering for high availability BGP for dynamic routes update Encaps/Decaps NVGRE packets Multitenant aware NAT for Internet access Host Datacenter Network Virtualization Fabric Host Internet FabrikamContoso Multi-tenant VPN Gateway Bridge Between VM Networks & Physical Networks

16. 16 What it means: Provides ability to control physical network hardware directly from applications Enforces routing policies on the fly Requires programmable hardware that uses a standard protocol like OpenFlow, Cisco OnePK and so on. Challenges: Adds complexity to the application Creates challenges in heterogeneous environment Is it production ready? Applicable to certain classes of applications like Microsoft Lync, Network diagnostic tools, high fidelity video games Most Line of Business applications and workloads may not need this level of control Aggregation Switches ToR VM Application

17. Challenges Manage a large number of physical and virtual switches Integrate management of physical and virtual networks Solution Logical Network Organizes and simplifies network assignments for hosts, virtual machines and services Integrated physical and virtual switch VLAN policy VM Network Creation/deletion of isolated virtual network overlay (HNV) on physical network VM Network Logical NW Physical Network VLAN 25 Subnet 10.0.0.0/26 Fabric Virtual Extensio n VM Network Logical NW

18. Challenges Allow seamless migration of VM while maintaining network policy Solution Logical Switch Single logical entity spanning hosts Consistent policy and configuration Management of Hyper-V Extensible Switch Installation and configuration of switch extensions Configuration of network policies Network policies automatically move with the VM Includes 3 rd party extensions VM Network Logical NW Physical Network VLAN 25 Subnet 10.0.0.0/26 Fabric Virtual Extensio n VM Network Logical NW

19. Communicating using WS-MAN OMI How switch management works Standards-based CIM modelSwitches running Open ManagementInfrastructure (OMI)Switch Management PowerShellCmdlets Problems solved Common management interface across multiple network vendors A utomate common network management tasks Logo Program enables customers to find/buy switches that “just work”

20. OMI-based top-of-rack switch Hyper-V switch extensions Chipset extensions Gateway appliances

21. Migrate workloads seamlessly across clouds Preserve policies, VM settings, and IP addresses Move from test to production with minimal network configuration Reduce Opex related to networking Simplify datacenter consolidation and mergers and acquisitions Extend datacenter into hybrid cloud environment without specialized networking gear Enables customers to bring their own IP addresses and DHCP servers Realize scalable multi-tenancy Simplify connectivity to customer datacenter Provide flexible VM placement without reconfiguration Decouple server and network admin roles to increase agility Enforce unified policy across entire datacenter from a single management plane To Workload Owners To EnterprisesTo Hosters To Private/Public Cloud Datacenter Admins

22. DHCP failover Quality of Service SMB Multichannel Embrace a multi- vendor ecosystem Provide consistent bandwidth for services Run services without interruption 22 Automatically remediate issues with no human intervention NIC Teaming

23. SMB client SMB server File copy NIC File copy Automatic detection and use of multiple networkconnections between SMB client and server Helps server applications be resilient to networkfailure Transparent Failover with recovery of networkfailure if another connection is unavailable Improved throughput Bandwidth aggregation through NICTeaming Multiple nodes/CPUs for networkprocessing with RSS-capable networkadapters Automatic configuration with very littleadministrative overhead 23

24. Automatic DHCP failover based on DHCPfailover IETF spec Provides multi-site IP address continuity toclients by helping eliminate single points offailure Provides in-box support for failover,without the need for clustering Uses a failover setup consisting of twoservers located across different geographiclocations Includes active/active or active/passivebehavior Simple provisioning and configuration ofDHCP server using PowerShell 24 Hot standby DHCP failover in a hub-and-spoke deployment Load-sharing DHCP failover in a single site with a single subnet

25. Helps guarantee predictable networkperformance and fair sharing during congestion Supports bandwidth floors and bandwidth caps Helps enforce customer SLAs and maximumpricing caps Sets QoS for virtual machine or traffic type Uses software built into Windows Server 2012 R2Preview or hardware capable of Data CenterBridging (DCB) to assign minimum QoS settings Supports dynamic change of QoS settingsthrough PowerShell without any downtime 25 Runtime bandwidth demand (gigabits per second) ServiceReservation T1T2T3 Virtual machine 30%442 Storage40%556 Live migration 20%032 Cluster Shared Volume 10%0.510 T2 3 4 1 T3 2 6 2 T1 4 5 0.5 Actual bandwidth usage by service When bandwidth is available, each service takes as much as it can When the link is congested, each service takes its fair share When bandwidth becomes available, each service takes as much as it wants 2

26. Virtual adapters Team network adapter Provides network fault tolerance andcontinuous availability when network adaptersfail by teaming multiple network interfaces Supports all vendors in-box Facilitates local or remote managementthrough Windows PowerShell or UI Enables teams of up to 32 network adapters Aggregates bandwidth from multiple networkadapters Includes multiple nodes: switch dependentand independent

27. Virtual adapters Team network adapter  TCP streams or "flows” are generally not continuous  Groups of packets sent between flows are called “flowlets”  Dynamic load balancing detects breaks in a flow of sufficient length to minimize possibility of packet reordering  Flows can be moved to other team members on flowlet boundaries to rebalance traffic  Dynamic LBFO maximizes resource utilization in teamed NICs by balancing loads across all NIC team members  Ideal when there are fewer VMs per team

28. 28

29. File Client SMB Buffer File Server With RDMA 29 Without RDMA App Buffer SMB Buffer OS Buffer Driver Buffer SMB Buffer OS Buffer Driver Buffer App Buffer SMB Buffer rNIC NIC Adapter Buffer NIC Adapter Buffer Adapter Buffer Adapter Buffer iWARP InfiniBand Higher performance through offloading of network I/O processing onto network adapter Higher throughput with low latency and ability to take advantage of high-speed networks (such as InfiniBand and iWARP) Remote storage at the speed of direct storage Transfer rate of around 50 Gbps on a single NIC port Compatible with SMB Multichannel for load balancing and failover

30. Without VMQ Hyper-V Virtual Switch is responsible forrouting & sorting packets for VMs This leads to increased CPU processing, allfocused on CPU0 With VMQ Physical NIC creates virtual networkqueues for each VM to reduce host CPU With Dynamic VMQ Processor cores dynamically allocated fora better spread of network trafficprocessing Increased efficiency of network processing on Hyper-V hosts Hyper ‑ V Host

31. vRSS provides near line rate to a VM onexisting hardware, making it possible tovirtualize traditionally network intensivephysical workloads Extends the RSS functionality built intoWindows Server 2012 Maximizes resource utilization byspreading VM traffic across multiplevirtual processors Helps virtualized systems reach higherspeeds with 40 Gbps and 100 Gbps NICs Requires no hardware upgrade andworks with any NICs that support RSS Node 0Node 1 Node 2 Node 3 2 2 3 3 1 1 0 0 Incoming packets vProc vNIC

32. 32 VM traffic bypasses virtual switch and performs I/Odirectly to NIC Ideal for high I/O workloads that do not require portpolicies, QoS, or network virtualization enforced at theend host virtual switch Most 10Gbps and in-box NICs SR-IOV capable Benefits Maximizes use of host system processors and memory Reduces host CPU overhead for processing networktraffic (by up to 50%) Reduces network latency (by up to 50%) Provides higher network throughput (by up to 30%) Full support for Live Migration Host Virtual Machine VM Network Stack Synthetic NIC Hyper ‑ V Extensible Switch SR-IOV NICVF Virtual Function VF

33. 33 Provide an easy-to-use, robust automation framework Monitor resource usage Manage IP address space and consolidate external tools Simplify management in multisite environments Management with Virtual Machine Manager IP Address Management Windows PowerShell Resource Metering Monitoring with Operations Manager

34. 34 IPAM distributed architecture Domain europe.corp.woodbridge.com IPAM Server (UK) DHCP, DNS, DC, and NPS servers IPAM Server (Bangalore) DHCP, DNS, DC, and NPS servers Domain fareast.corp.woodbridge.com IPAM Server (Hyderabad) DHCP, DNS, DC, and NPS servers Site: Hyderabad Branch office Site: Bangalore Branch office Site: UK Branch office IPAM server (Redmond) DHCP, DNS, DC, and NPS servers Site: Redmond Head office Inbox feature for integrated management of IPaddresses, domain names, and device identities Tightly integrates with Microsoft DNS andDHCP servers Provides custom IP address space display,reporting, and management Audits server configuration changes and tracksIP address use Migrates IP address data from spreadsheets orother tools Monitors and manages specific scenario-basedDHCP and DNS services

35. 35 Manages virtual address space in addition tophysical address space Imports and exports network configurationsautomatically through plugin for System CenterVirtual Machine Manager Enables synchronization of Active DirectorySites and subnets information with IPAM Supports large scale enterprise deployments Uses SQL Server to store IP address information Lets admins define user roles, access scope andaccess policy through role-based access control Data collection tasks Network Administrator Fabric Administrator System Administrator Forensics Investigator Security Groups

36. Comprehensive coverage with more than 400 cmdlets related to networking 36 Remote machine management support Integrated object model

37. 37 Metrics A two-tenant environment built with Hyper-V in Windows Server 2012 R2 Preview Average CPU use Average memory use Minimum memory use Maximum memory use Maximum disk allocation Incoming network traffic Outgoing network traffic Storage IOPS Virtual Machine Resource Metering 2010 Resource Pool Internet Resource Metering 10 5 30452540 Resource pool Internet Customer 2 30 55 Resource pool Internet Customer 1 0 0 0 0 Benefits Tracks and meters resource usage and provides infrastructure to build chargeback solutions Tracks resource usage of individual virtual machines or virtual machine pools Metering not affected by virtual machine movement Uses active control lists (ACLs) from network metering port Provides complete Windows PowerShell support 101520253035404550 5152025

38. Server or client with Microsoft Message Analyzer Windows Server 2012 R2 WMI to configure the filters and truncation WMI starts/stops the session Truncated network traffic redirected ETW events Remote Live Monitoring provides remote packet and ETW event capture from any host in the datacenter, enabling low-touch diagnostics at high scale Remote monitoring of network traffic on ain Windows Server 2012 is not simple Windows Server 2012 R2 Preview makes iteasy to mirror and capture network trafficfor remote and local viewing Provides integrated GUI experiencewith Message Analyzer Collects offline traffic captures fromremote computers Provides filters to select packets by IPaddresses and VMs Captures ETW events for remote andlocal viewing

39. 39 Seamlessly extend Datacenter to Azure Inbox Gateway to extend beyond private cloud Extending your private cloud to hosters Extending your private cloud to Azure Cross-premises connectivity

40. VPN site-to-site tunnel IKEv2-IPsec VPN site-to-site tunnel IKEv2-IPsec VPN site-to-site tunnel IKEv2-IPsec Hosted Cloud Contoso private cloud Woodgrove private cloud Subnet1 Subnet2 Subnet1 Subnet2 Contoso London branch Subnet3 Contoso New York branch Subnet4 Woodgrove Brazilian branch Subnet3 Subnet4 Windows Server 2012 R2 Preview remote access site-to-site VPN server Industry standard IKEv2-IPsec router 40 VPN site-to-site functionality inremote access: Provides cross-premises connectivitybetween enterprises and hosting serviceproviders Connects to private subnets in hostedcloud networks Provides connectivity amonggeographically separate enterprises

41. Orange Corp site1 Orange Corp site2 S2S Tunnel Orange Virtual Network Blue GW Green GW Orange GW  Includes Site-to-site (S2S) VPN as part of Remote Access Server  Requires Windows Network Virtualization  Needs one VM per tenant for the gateway

42. Orange Corp site1 Orange Corp site2 S2S Tunnel Orange Virtual Network BGP Active-Standby  Provides multitenant S2S gateway  Includes guest clustering for HA  Uses BGP for dynamic routes update  Provides multitenant-aware NAT for Internet access

43. Virtual Network Your datacenter On premises 43 Subnet 1 Subnet 2Subnet 3 DNS Server Individual computers behind corporate firewall VPN Gateway VPN Device Site-to-Site VPN Remote workers VPN Device  Extend your datacenter to Azure by creating VMs in private networks  Connect individual computers to Azure VMs and virtual networks using Point to Site connectivity without VPN device  Windows inbox gateway to connect virtual networks in private cloud and Azure

44. Advancing Software Defined Networking Simplifying Datacenter Network management Improving Network Performance Delivering Continuously Available Applications 44 Networking in the Hybrid Cloud

45. DOWNLOAD Windows Server 2012 R2 Preview aka.ms/ws2012r2 #WS2012R2JS DOWNLOAD System Center 2012 R2 Preview aka.ms/sc2012r2 Hands-On Labs Talk with our Experts in Chat tool. http://www.microsoftvirtualacademy.com System Center 2012 R2 Jumpstart July 15 th - http://aka.ms/SCR2JS