打造新世代企業資料中心 Windows Server 2016 重裝登場. 馮立偉 Hybrid Cloud Lead Microsoft Taiwan

Transcription

1

2 打造新世代企業資料中心 Windows Server 2016 重裝登場 馮立偉 Hybrid Cloud Lead Microsoft Taiwan

3 Windows Server 2016

4

5

6

7

8

9

10 現今攻擊時程 第一個主機被滲透 網域管理者帳號被破解 攻擊者被發現 小時 超過 200 天 ( 每個產業不同 )

11 攻擊目標及方向 攻擊應用程式及基礎架構 攻擊虛擬化平台本本身

12

13

14

15

16

17 保護 OS 所面臨的挑戰 新的漏洞攻擊可能會從作業系統的開機路徑長驅直入, 直達應用程式作業 需要在不影響合法工作負載的情況下防範已知和未知威脅

18 保護 OS 及應用程式在地部署或是任何雲端上 Device Guard 確保自開機起, 作業系統只會執行允許的二進位檔 Windows Defender 提供主動防護, 以便在不影響工作負載的情況下抵抗惡意程式碼. Control Flow Guard 透過封鎖記憶體破壞攻擊來防範未知的資訊安全風險

19

20

21

22 受保護 VM

23

24

25

26

27

28

29

30 Windows Server 2016 Hyper-V 業界領先 Capability Windows Server 2012/2012 R2 Standard and Datacenter Windows Server 2016 Standard and Datacenter VMware vsphere 6 Enterprise Plus Physical (Host) Memory Support Up to 4 TB per physical server Up to 24 TB per physical server (6x) Up to 6 TB per physical server (12 TB for specific OEM certified platform) Physical (Host) Logical Processor Support Up to 320 LPs Up to 512 LPs Up to 480 LPs Virtual Machine Memory Support Up to 1 TB per VM Up to 12 TB per VM (12x) Up to 4TB per VM Virtual Machine Virtual Processor Support Up to 64 VPs per VM Up to 240 VPs per VM (3.75x) Up to 128 VPs per VM Source:

31

32 運用叢集提升效能 VM 負載平衡識別閒置節點並分配虛擬機器以使用這些節點, 實現叢集的動態負載平衡 VM 啟動順序可在不同的 VM 群組之間建立多層相依性, 以便定義啟動順序 SMB 多重通道和多重 NIC 容錯移轉叢集可以自動充分運用現代化網路交換器和 NIC, 為您的使用者提供絕佳的網路輸送量和更高的安全性

33 VM 恢復能力彈性工作負載和 VM 的容錯移轉叢集增強功能 VM 運算恢復能力 :

34

35 Windows Server 2016 Hyper-V 功能更新部分 High performance live migration (compression/rdma) Zero downtime upgrades Automatic VM Activation Live VM export App consistent guest backup Enhanced VMConnect Dynamic memory host balancing First class Linux support Dynamic memory, file system consistent host based backup RemoteFX over WAN Generation 2 Virtual Machines Secure boot in a VM User defined meta data for VHDX PowerShell for all Hyper-V operations Hyper-V Metrics Shared nothing live migration Shielded VM support vtpm Key Storage Drive for Gen 1 VM Guest VSM (enable Device Guard & Credential Guard in a VM) VM Isolation Linux Secure Boot RemoteFX improvements Discrete Device Assignment of GPU Headless mode support Distributed Storage QoS REFS Block REFS Fast Fixed Disk Creation High performance auto tiered storage spaces Write back cache with spaces Storage QoS Shared VHDX for guest clustering VHDX online resize Storage deduplication with live VMs for VDI Hyper-V Recovery Manager (Microsoft Azure Site recovery) Azure Backup Inbox multi-tenant site-to-site VPN gateway for physical & virtual networks Protected VM Networks/Virtual RSS Enhanced LBFO performance with NIC teaming Hyper-V Extensible Switch 4K Sector support Nested virtualization VMCX configuration file Nano Server Host Support Multi-host management (WMI) Hypervisor Power Management (connected standby works) Virtual machine grouping IC Upgrade via Windows Update HvSocket (Guest-Host) TimeSync improvements 240 VP, 12TB Beast VMs Windows Containers Resilient Change Tracking (RCT) Backup improvements (no host VSS) Backup of Shared VHDX Hyper-V over SMB Hyper-V over Spaces & ReFS 64 VP, 1 TB Monster VMs SR-IOV for 10+GB networking 64TB VHDX Hyper-V Replica Network Virtualization USB redirection over RemoteFX vgpu Hot add/remove of storage VHDX resiliency Dynamic & differencing VHDX performance improvements 384 LP, 4TB physical system 2+ Million IOPS to a single VM Resource Pools NUMA in a VM 1024 running VMs on a host VM configuration version & upgrade Runtime Memory Resize Hot / add remove of NICs Production Checkpoints Storage Resiliency - All Paths Down Online Resize for Shared VHDX Hot add / remove of replicated VHD Cluster OS Rolling Upgrade Cluster Compute Resiliency Cluster Node Quarantine Device Naming of NIC 512LP, 24TB Host Direct Device Assignment of NVMe

36 Storage Software

37

38 傳統儲存裝置陣列 Virtual Machines Compute Virtualization Host Connectivity SAN Fibre Channel / iscsi storage network Storage Array

39 剖析儲存裝置陣列 Compute Connectivity Fibre Channel / iscsi storage network SAN Storage Array Controller Storage Software Controller Storage Software Disk Connectivity Backplane Disks Raw Storage

40 Windows Server 2012 Shared Storage Spaces Compute Low cost SMB3 storage network Connectivity NAS SMB3 Storage Network Fabric Scale-out File Server Low cost storage backend Storage Software SAS Connectivity SAS Enclosure (JBOD) Raw Storage

41 Storage Spaces Direct - 更多延展性 + 更低成本 Compute 更多延展性 不需要 SAS Fabric 更低儲存裝置後端費用 Connectivity NAS Raw Storage SMB3 Storage Network Fabric Scale-out File Server Storage Software

42 超融合 - Storage Spaces Direct 更低廉的儲存成本運算 + 儲存在同一節點 Virtual Machines Virtualization and Storage Host Compute and Storage Storage Software

43 Hybrid All-Flash NVMe+SSD+HDD RDMA

44

45 輕鬆達到 1,000,000 IOPS 4 Nodes Dell R730XD 2U Rack Servers 4 - Samsung NVMe model PM Seagate 3.5 4TB HDD 100% 4K Random Read

46

47 我們紀錄是可以達到 6,000,000 IOPS. 100% 4k Read, N = 16, 4 X P3700 NVMe / Node, Intel Xeon E5 2699v4, Chelsio 40 GbE

48

49

50

51

52

53 Cisco UCS C240 M4 Rack Server Dell PowerEdge R730xd FUJITSU PRIMERGY RX2540 M1 HP Apollo 2000 System Intel Server Board S2600WT-Based Systems Lenovo System x3650 M5 Quanta D51PH

54 Site A Site B Storage Software Storage Software 儲存體複本降低整體 DR 投資成本

55

56

57

58 資料中心網路

59

60

61 運用 SDN 提升 app 敏捷度及安全性

62

63

64

65 平台 管理 支援

66

67

68

69 企業等級資料中心管理 Windows Server 管理第一選擇 System Center 2016 強化效能及使用性來提升整體 IT 營運管理效益 透過混合雲機制進行有效管理

70 Windows Server 2016 二日技術研習營 課程資訊 時間 :9:30~17:30 講師 : 曹祖聖 台中場 日期 :2016/12/20-21 課程地點 : 台中恆逸教育訓練中心 報名連結 : file/form/index.cfm?pkformid=0x ee9 高雄場 日期 :2016/12/15-16 課程地點 : 高雄恆逸教育訓練中心 報名連結 : ofile/form/index.cfm?pkformid=0x e2