Hyper-V Deployment and Best Practices. Satyen Pradhan Premier Field Engineer Microsoft (Malaysia)

Transcription

1 Hyper-V Deployment and Best Practices Satyen Pradhan Premier Field Engineer Microsoft (Malaysia)

2 Session Objectives

3 Hyper-V Benefits Server consolidation Utilization Business Continuity Flexibility

4 Hyper-V: Production Ready TAP, RDP & MSIT Hyper-V Deployments Thousands of Hyper-V VMs in PRODUCTION Windows Server 2003/2008 Roles: File, Print, AD, RODC, IIS/Web, TS, Application Services, DHCP, DNS, WSS and more Microsoft Server Products: SQL, Exchange, HPC, ISA, Sharepoint, Project Server, VSTS, BizTalk, Configuration Manager, Operations Manager & more Hyper-V Stats: Performance Blockers: ZERO Deployment Blockers: ZERO Application Compatibility Bugs: ZERO Scalability Blockers: ZERO

5 Hyper-V: Production Scalability Hyper-V Powering Microsoft Internet Properties TechNet: 100% Hyper-V ~1 million hits a DAY MSDN: 100% Hyper-V ~3 million hits a DAY Microsoft.com: ~50% Hyper-V and growing >1 billion hits a month

6 Provided by: Parent Partition Child Partitions OS ISV / IHV / OEM Microsoft Hyper-V Microsoft / XenSource VM Worker Processes Applications WMI Provider VM Service Applications Applications Applications User Mode Windows Server 2008 Windows Kernel IHV Drivers VMBus VSP Windows Server 2003, 2008 Windows Kernel VMBus VSC Non- Hypervisor Aware OS Emulation Xen-Enabled Linux Kernel Linux VSC VMBus Hypercall Adapter Kernel Mode Windows hypervisor Ring -1 Designed for Windows Server Hardware

7 Virtualization Requirements 1. Scheduler 2. Memory Management 3. VM State Machine 4. Virtualized Devices 5. Storage Stack 6. Network Stack 7. Drivers 8. Management API

8 Why not get rid of the parent? No defense in depth Entire hypervisor running in the most privileged mode of the system Virtual Machine Virtual Machine Virtual Machine User Mode User Mode User Mode Ring 3 Kernel Mode Kernel Mode Kernel Mode Ring 0 Scheduler Memory Management Storage Stack Network Stack VM State Machine Virtualized Devices Drivers Management API Ring -1 Hardware

9 Micro-kernelized Hypervisor Defense in depth Using hardware to protect Hyper-V doesn t use ring compression Parent Partition Virtual Machine Virtual Machine VM State Machine Virtualized Devices Management API User Mode User Mode Ring 3 Storage Stack Network Stack Drivers Kernel Mode Kernel Mode Ring 0 Scheduler Memory Management Hardware Ring -1

10 HOW TO INSTALL HYPER-V?

11 SERVER CORE

12 Windows Server Core

13 Windows Server Core

14 Step-by-step instructions ENABLING HYPER-V WITH SERVER CORE

15 Installing Hyper-V Role on Core Install Windows Server 2008, select a Server Core installation option

16 Set Admin Password net user administrator <new_password> shutdown /r /t 0

17 Rename Computer netdom renamecomputer %computername% /newname:<new_computername> shutdown /r /t 0

18 Join Domain netdom join %computername% /domain:<domain> /userd:<username> /passwordd:* enter password when prompted shutdown /r /t 0

19 Add domain account to local admin group net localgroup administrators /add <domain_account> logoff

20 Add Hyper-V Role ocsetup Microsoft-Hyper-V Restart when prompted

21 Enabling Remote Desktop OPTIONAL cscript \windows\system32\scregedit.wsf /ar 0 cscript \windows\system32\scregedit.wsf /cs 0

22 HYPER-V NETWORKING

23 Hyper-V Networking Two physical network adapters at minimum One for management One (or more) for VM networking Dedicated NIC(s) for iscsi Connect parent to backend management network Only expose guests to internet traffic

24 Hyper-V Network Configurations Example 1: Physical Server has 4 network adapters NIC 1: Assigned to parent partition for management NICs 2/3/4: Assigned to virtual switches for virtual machine networking Storage is non-iscsi such as: Direct attach SAS or Fibre Channel

25 Hyper-V Setup & Networking 1

26 Hyper-V Setup & Networking 2

27 Hyper-V Setup & Networking 3

28 Hyper-V Network Configurations Example 2: Server has 4 physical network adapters NIC 1: Assigned to parent partition for management NIC 2: Assigned to parent partition for iscsi NICs 3/4: Assigned to virtual switches for virtual machine networking

29 Hyper-V Setup, Networking & iscsi

30 Networking: Parent Partition

31 Networking: Virtual Switches

32 Step by Step Instructions HYPER-V & STORAGE

33 Hyper-V Storage... Performance wise from fastest to slowest Fixed Disk VHDs/Pass Through Disks About the same in terms of performance Dynamically Expanding VHDs Grow as needed Pass Through Disks Pro: VM writes directly to a disk/lun without encapsulation in a VHD Cons: You can t use VM snapshots Pro/Con: Dedicating a disk to a vm Use Fixed Disk VHDs or Pass Through Disks in Production!

34 VM Setting No Pass Through

35 Computer Management: Disk

36 Taking a disk offline

37 Disk is offline

38 Pass Through Configured

39 BEST PRACTICES & TIPS AND TRICKS

40 Deployment Considerations Minimize risk to the Parent Partition Use Server Core Don t run arbitrary apps, no web surfing Run your apps and services in guests Moving VMs from Virtual Server to Hyper-V FIRST: Uninstall the VM Additions Two physical network adapters at minimum One for management (use a VLAN too) One (or more) for vm networking Dedicated NIC(s) for iscsi Only expose guests to internet traffic Cluster Production Systems

41 Best Practices for Physical Servers Avoid Overloading the Server Ensure High Speed access to Storage Avoid Mixing Virtual Machines that can and cannot use Integration Services Avoid Storing System Files on Drives used for Hyper-V Storage Monitor Performance to Optimize and Manage Server Loading

42 Best Practices for Configuring Virtual Machines Install Integration Services Uninstall VMAdditions and Compact the VHDs Set Display for Best Performance To ensure the hardware acceleration is set to full Configure Fixed-Size VHDs The file system is less likely to fragment and better space management Use SCSI Virtual Adapter for Data Drives Allocate CPU Resources Based on Anticipated Usage Consider using Pass-Through Disks Configure Domain Controllers to Optimize Performance Never save state or pause and do not take snapshots

43 Windows Server 2003 Cluster Creation

44 Cluster Hyper-V Servers

45 Don't forget the ICs! Emulated vs. VSC

46 Anti-Virus & More Anti-Virus Parent partition Run AV software and exclude.vhd Configure Anti-Virus to Bypass Hyper-V Processes and Directories Child partitions Run AV software within each VM Use.isos Great performance; Can be mounted and unmounted remotely Physical DVD can t be shared across multiple vms Having them in SCVMM Library fast & convenient

47 BitLocker-Persistent Protection Mitigating Against External Threats Very Real Threat of Data Theft When a System is Stolen, Lost, or Otherwise Compromised (Hacker Tools Exist!) Decommissioned Systems are not Guaranteed Clean BitLocker Drive Encryption Support in Windows Server 2008 Addresses Leading External Threats by Combining Drive Level Encryption with Boot Process Integrity Validation Leverages Trusted Platform Model (TPM) Technology (Hardware Module) Integrates with Enterprise Ecosystem Maintaining Keys in Active Directory Protects Data While a System is Offline Entire Windows Volume is Encrypted (Hibernation and Page Files) Delivers Umbrella Protection to Applications (On Encrypted Volume) Ensures Boot Process Integrity Automatically Locks System when Tampering Occurs Simplifies Equipment Recycling One Step Data Wipe Deleting Access Keys Renders Disk Drive Useless

48 Online Resources Hyper-V WMI API Virtual Hard Disk Specification OSP: MSDN & TechNet Powered by Hyper-V Virtualization Solution Accelerators How to install the Hyper-V role Windows Server 2008 Hyper-V Performance Tuning Guide Using Hyper-V & BitLocker White Paper

49 Q & A

50 Have You Visited the Windows Client TechCenter website? Windows Client TechCenter provides IT professionals with the right resources, at the right technical level, at the right point in your technology adoption and management processes

51 Special Start.NET Promotion RM50 DISCOUNT + a FREE GIFT for selected Start.NET Workshops Windows Presentation Foundation Silverlight 2.0 SQL Server 2008 SharePoint Limited to the first 50 delegates who registered.. Register today!

52 Housekeeping Announcement Please complete the evaluation form and return it to the Registration Counter in return for a Windows 7 Beta DVD. Here is where you can get the product key : Please complete the TechNet MSDN Quiz Sheet and return it to the Redemption Counter in return for a mystery gift Print out the TechCenter Homepage and redeem your gift at the Redemption Counter Visit the Partners & MS Learning counters at the foyer for great promotional offers

53 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation asof the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be acommitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.