Pritam Pabla Technology Solutions Specialist Hybrid Cloud

Size: px

Start display at page:

Download "Pritam Pabla Technology Solutions Specialist Hybrid Cloud"

Magdalen Palmer
6 years ago
Views:

1 Pritam Pabla Technology Solutions Specialist Hybrid Cloud

3 Business Landscape Velocity Complexity Costs Processes

Changing world of business Market Trends Accelerating shift to cloud services Expanding quantity of data Increasing mobility and bring your own devices trends Growing demand for business analytics

4 Changing world of business Market Trends Accelerating shift to cloud services Expanding quantity of data Increasing mobility and bring your own devices trends Growing demand for business analytics Business Goals Customer satisfaction Operational / Cost efficiency Employee productivity Managing risk IT Needs Deliver on security and compliance expectations Mitigate IT staff and skill resources constraints Optimize IT budgets Improve IT agility

5 Modern IT investments SI COST POLICY SUBSCRIPTION DEVOPS TOOLING PACKAGING DETECT PREVENT WINDOWS, LINUX ORCHESTRATION PATCHING AZURE, AWS, CONFIG MONITORING PRIVATE CLOUDS BACKUP RECOVERY ANALYTICS DISCOVERY ALERTS

6 Microsoft hybrid IT management Simplified guest and workload management, both on-premises and in the cloud LINUX HYPER-V WINDOWS Microsoft Operations Management Suite LINUX HYPER-V WINDOWS LINUX VMware WINDOWS LINUX VMware WINDOWS Public cloud Azure or AWS Private or hosted third-party cloud, Rackspace, etc. HYPER-V WINDOWS WINDOWS VMWare WINDOWS On-premises with Windows Server, Azure Stack, System Center

7 Microsoft IT Infrastructure Products New in 2016 Windows Server 2016 Datacentre & Standard System Center Suite 2016 Datacentre & Standard System Center Configuration Manager (SCCM) 1511 to 1610 Microsoft Identity Manager 2016 Operations Management Suite (OMS) Azure Active Directory Premium Identity glue

8 Windows Server 2016 Windows Server 2016

9 What we heard from customers Security at the OS level Software-defined Datacenter (SDDC) Cloud-ready Application Platform Increasing breaches incidents Identity is target of attacks Complex to secure virtual environments Lack of integration between solutions Hard to deploy and operate Low footprint server No integration between Dev and Ops Fast and lightweight OS Hard to plan for public cloud

10 Windows Server design points The cloud-ready server operating system (OS) that delivers new layers of security and Azure-inspired innovation for applications and infrastructure Security at the OS level Software-defined Datacenter (SDDC) Cloud-ready Application Platform Built-in security capabilities Identity protection Secure the virtualization platform Built-in SDDC capabilities Affordable and enterprise ready Azure-inspired infrastructure Built-in containers Lightweight Nano Server option Bring licenses to Azure

11 Challenges in protecting credentials

12 Protect against compromised admin credentials Prevents Pass the Hash and Pass the Ticket attacks by protecting stored credentials through Virtualization based Security (VBS) Administration Limits administrative privileges to the bareminimum required set of actions (limited in space) Works in conjunction with Credential Guard for RDP session providing SSO for RDP sessions while eliminating the need for credentials to be passed to the RDP host Administration Provide privileged access through a workflow that is audited and limited in time

account lifecycle and monitoring In-box elevation workflows including automatic, manual and MFA

13 Identity Manager = JEA + JIT If there are fewer permanent admins, then less opportunity for attackers to compromise Some users have only occasional needs for admin rights Privileged user account lifecycle and monitoring In-box elevation workflows including automatic, manual and MFA Apply Privilege Access Management against your current AD environment Plug-in and customize for your environment

14 Protection of the Operating System Code Integrity Windows Defender Control Flow Guard

16 Virtual Machine easy of access! Here s what happens today when malicious fabric-admins want data from a VM 1. Logon and run Disk Manager 2. Attach the customer s VHDX 3. Assign it a drive letter 4. Read/copy whatever they want

17 Shielded Virtual Machine - Blocked Access Here s what happens when they try that with a shielded VM 1. Logon and run Disk Manager 2. Attach the customer s VHDX 3. Get irritated at the barrage of error messages

18 Protection for Virtual Machines Shielded VMs Host Guardian Service Generation 2 VMs

19 Windows Server design points The cloud-ready server operating system (OS) that delivers new layers of security and Azure-inspired innovation for applications and infrastructure Security at the OS level Software-defined Datacenter (SDDC) Cloud-ready Application Platform Built-in security capabilities Identity protection Secure the virtualization platform Built-in SDDC capabilities Affordable and enterprise ready Azure-inspired infrastructure Built-in containers Lightweight Nano Server option Bring licenses to Azure

20 Windows Server 2016 Hyper-V scalability Capability Windows Server 2012/2012 R2 Standard and Datacenter Windows Server 2016 Standard and Datacenter Physical (Host) Memory Support Up to 4 TB per physical server Up to 24 TB per physical server (6x) Physical (Host) Logical Processor Support Up to 320 LPs Up to 512 LPs Virtual Machine Memory Support Up to 1 TB per VM Up to 12 TB per VM (12x) Virtual Machine Virtual Processor Support Up to 64 VPs per VM Up to 240 VPs per VM (3.75x)

21 Confidently virtualize anything Rolling Cluster Upgrades Linux support Hot-add and remove

22 Software defined networking Network Controller Distributed Firewall Load Balancer

23 High performance storage, fraction of the cost Storage Spaces Direct FS Storage Spaces Replica Storage QoS

24 Windows Server design points The cloud-ready server operating system (OS) that delivers new layers of security and Azure-inspired innovation for applications and infrastructure Security at the OS level Software-defined Datacenter (SDDC) Cloud-ready Application Platform Built-in security capabilities Identity protection Secure the virtualization platform Built-in SDDC capabilities Affordable and enterprise ready Azure-inspired infrastructure Built-in containers Lightweight Nano Server option Bring licenses to Azure

25 Nano Server deployment option Just enough OS Third-party applications RDS experience Key roles & features Traditional VM workloads Full developer experience Containers and next-gen applications Nano Server Just enough OS Server Core Lower maintenance server environment Full GUI Specialized workloads

26 Nano Server performance advantages Critical Patches Reboots Ports Open Setup Time (s) VHD Size (GB)

27 Remotely Managing Nano Server Not Command Line only Server Manager Hyper-V Manager Failover Cluster Manager PerfMon, Event Viewer, etc. Server Management Tools (SMT) new web-based remote GUI PowerShell Core

28 What is a container? Traditional virtual machines = hardware virtualization VM VM VM VM VM Containers = Operating system virtualization CONTAINER CONTAINER CONTAINER CONTAINER CONTAINER OS

Containers - Docker World User DB Static website

5 + modsecurity + openssl + bootstrap 2 Redis +

nodejs + phantomjs Web frontend Ruby + Rails + sass +

7 + Flask + pyredis + celery + psycopg +

29 Containers - Docker World User DB Static website postgresql + pgv8 + v8 Queue Analytics DB nginx modsecurity + openssl + bootstrap 2 Redis + redis-sentinel hadoop + hive + thrift + OpenJDK Background workers Python celery + pyredis + libcurl + ffmpeg + libopencv + nodejs + phantomjs Web frontend Ruby + Rails + sass + Unicorn API endpoint Python Flask + pyredis + celery + psycopg + postgresql-client Development VM Customer Data Center QA server Public Cloud Disaster recovery Production Servers Production Cluster Contributor s laptop

Microsoft - Containers What is a container?

containers in Datacenter Edition Up to 2 OSEs or Hyper-V containers and unlimited Windows Server containers in Standard Edition

Lower costs associated with app deployment Increase server consolidation Windows Server Container Bring the agility and density

30 Microsoft - Containers What is a container? A new approach to build, ship, deploy, and instantiate applications Unlimited OSEs, Hyper-V containers, and Windows Server containers in Datacenter Edition Up to 2 OSEs or Hyper-V containers and unlimited Windows Server containers in Standard Edition Benefits of Containers Further acceleration of app deployment Reduce effort to deploy apps Streamline development and testing Lower costs associated with app deployment Increase server consolidation Windows Server Container Bring the agility and density of containers to the Windows ecosystem, enabling agile application development and deployment Hyper-V Container Offer a unique additional level of isolation for sensitive applications with no additional coding required

31 Windows Server Containers Creation, deployment, and management Physical/Virtual Servers

32 Windows Server 2016 Licensing, feature differentiation & Servicing

now might have to buy an extra license Example: a server with 2 processors, each at 8 cores

33 Window Server 2016 Licensing Licensing cores based on consumption Previously per socket, now per core Won t change cost if you have 16 or fewer cores on a server For more than 16, now might have to buy an extra license Example: a server with 2 processors, each at 8 cores will be the same cost Example: a server with 2 processors, each at 16 cores will now cost double

34 Introducing the Azure Hybrid Use Benefit (HUB) Benefits Use Windows Server licenses in Azure datacenters when covered by Software Assurance. In Azure, pay only for the base virtual machine service utilization. Datacenter edition can be run in Azure and onpremises simultaneously. Significantly reduce costs compared to running Windows Server in other public clouds. Details Licenses required to have Software Assurance. Each 2-processor Windows Server Datacenter or Standard edition allows up to two Windows Server VMs on Azure at 8 cores each. Note: D4 Virtual Machine = 8 cores, 28GB RAM, 400GB Disk. Pricing comparison assumes EA Level D pricing.

35 Windows Server 2016 feature differentiation Standard and Datacenter editions Delivers enhancements to core Windows Server functionality. Makes modern app development features accessible. Datacenter Edition Continues to enable high density virtualization. Adds advanced software-defined datacenter capabilities, new networking stack and Shielded Virtual Machines. Datacenter Edition Standard Edition Core Windows Server functionality OSEs*/Hyper-V containers Unlimited 2 Windows Server containers Unlimited Unlimited Nano Server** Host Guardian Service Storage features including Storage Spaces Direct and Storage Replica Shielded Virtual Machines Networking stack *OSE refers to a server Operating System Environment. Windows Server Standard Edition license permits two OSEs or VMs when all physical cores are licensed. **Software Assurance is required to deploy and operate Nano Server in production.

optimized for your hardware - and supported by the OEM Your one-stop shop for hardware, OS,

36 Why choose an OEM Server license? Simplest, most cost-effective license for many businesses OS and drivers pre-tested and optimized for your hardware - and supported by the OEM Your one-stop shop for hardware, OS, and CALs Same downgrade and virtual machine portability rights as with volume licensing License reassignment to other server hardware (with some licenses)

37 Long Term Servicing Branch (LTSB) servicing model This is the traditional servicing model Windows Server has always used Two Windows Server 2016 installation options use this model

38 Current Branch for Business (CBB) Nano Server will be CBB only What does this change? What doesn t this change?

39 Recap: Windows Server 2016 The cloud-ready server operating system (OS) that delivers new layers of security and Azure-inspired innovation for applications and infrastructure Security at the OS level Software-defined Datacenter (SDDC) Cloud-ready Application Platform Protection to Identity Secure the virtualization platform Built-in layers of security Affordable & Enterprise ready Learnings from Azure Built-in SDDC capabilities Support to containers Built-purpose OS AHUB eases transition to Cloud

40 System Center Suite 2016 & Operations Management Suite (OMS)

System Center 2016 Configuration Manager OS

41 System Center 2016 Configuration Manager OS Deployment, Software Updates, Compliance & Reporting Virtual Machine Manager VM & cloud management, infrastructure provisioning Operations Manager Infrastructure & application monitoring & alerting Orchestrator Integration & automation of key technologies & processes Endpoint Protection Protect the infrastructure against malware & rootkits Data Protection Manager Continuous protection of key applications & workloads Service Manager IT Service Management & IaaS Self-Service

42 System Center Benefits Device Management Support for Windows 10 deployments, MDM enrollment with Azure AD, Access restriction based on device enrollment and policy Provisioning Support for Windows Server 2016 Hyper-V features, Rolling cluster upgrades, Simplified networking, Shielded VM provisioning, Guarded host management, Support for vcenter 5.5 Monitoring Nano Server, Windows storage, SMI-S support, MP Catalog, Performance improvements, Enhanced Data Visualization, SCOM Partner Program Automation Migration to cloud, SCO Integration Packs and Runbooks Self-Service Improved usability and perf, HTML5 self-service portal, New Exchange connector Data Protection Azure Express Route support, Shielded VM, Storage spaces direct

43 System Center 2016 editions and features Microsoft System helps you realize the Microsoft Cloud OS vision by delivering unified management across customer, service provider, and Azure datacenters. Datacenter Edition Standard Edition OSEs*/Hyper-V containers Unlimited 2 Windows Server containers Unlimited Unlimited Configuration Manager Operations Manager Data Protection Manager Virtual Machine Manager Service Manager Orchestrator Endpoint Protection Manager *OSE refers to a server operation system environment under management by System Center.

44 Introducing Operations Management Suite LINUX HYPER-V WINDOWS Microsoft Operations Management Suite LINUX HYPER-V WINDOWS LINUX VMware WINDOWS LINUX VMware WINDOWS Public cloud Azure or AWS Private or hosted third-party cloud, Rackspace, etc. HYPER-V WINDOWS WINDOWS VMWare WINDOWS On-premises with Windows Server, Azure Stack, System Center

45 Operations Management Suite (OMS) components Insight & Analytics Automation & Control Protection & Recovery Security & Compliance Gain visibility across your hybrid enterprise cloud Azure Operational Insight for Log analytics Orchestrate complex and repetitive operations Azure Automation Ensure data integrity and application availability Azure Backup. Azure Site Recovery for Disaster Recovery Secure your workloads, servers, and users Azure Operational Insight for Security analytics

47 Microsoft Azure Stack

48 Azure Services in your datacenter Microsoft Azure Stack Azure services from their own datacenter.

49 * - some components will be in Preview at Azure Stack GA

50 Legend = Available at Azure Stack GA = In preview at Azure Stack GA

Microsoft Azure Regions 36 Azure regions worldwide North Central US United Kingdom South Finland Central US US Gov US DoD West West Central US South Central US Canada Central US Gov Canada East US

51 Microsoft Azure Regions 36 Azure regions worldwide North Central US United Kingdom South Finland Central US US Gov US DoD West West Central US South Central US Canada Central US Gov Canada East US DoD East United Kingdom West East US East US 2 North Europe West Europe Germany Central** Germany Northeast** Vienna West India Central India Korea Central Korea South China West* Japan East Japan West China East* East Asia South India datacenters Southeast Asia Asia One of 3 largest networks in the world *Operated by 21 Vianet Chile Brazil South Australia East **German data trustee services provided by T-systems Australia Southeast

Plus other hardware vendors Accelerated time to value From

productive much faster Enriched lifecycle management Greater

services, not operations Continuous innovation Newest

52 Plus other hardware vendors Accelerated time to value From concept to operations in days, not months Help developers be productive much faster Enriched lifecycle management Greater quality and system reliability Focus on delivering Azure services, not operations Continuous innovation Newest services and fastest updates No disruption to tenant availability or experience

53 Microsoft Azure Stack - Technical Preview 2

2015 Microsoft Corporation. All rights reserved.

55 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Circle IT: Microsoft Update 2016

Circle IT: Microsoft Update 2016 Microsoft Infrastructure Technologies Pritam Pabla Technology Solutions Specialist Hybrid Cloud v-pritap@microsoft.com Agenda Windows Server 2016 New Features & Enhancements