Što nam donosi Windows Server vNext (Technical Preview)?

Tomica KaniškiCitus d.o.o.tomica@kaniski.euhttp://blog.kaniski.eu/

DISCLAIMER:Content presented here is „the current state of things” and, because components are still in the early stages of development, they may change in the final version of the product (or have been changed already)!

If not stated otherwise, all content is referring to the Technical Preview release, not final version!

Agenda• Hyper-V

• Windows Defender

• Remote Desktop Services

• Storage Services

• Failover Clustering

• Networking

• PowerShell 5.0

• Important issues

Hyper-V (1)• new VM upgrade process

‐ new VM version (not generation!) – 6.0 (Windows Server 2012 R2 VMs were 5.0)

‐ Hyper-V will not automatically upgrade virtual machines

‐ upgrading a virtual machine is a manual operation that is separate from upgrading the host

‐ individual virtual machines can be moved back to earlier versions, until they have been manually upgraded

Update-VMConfigurationVersion

• VM servicing‐ drivers delivered directly to the guest operating system via Windows

Update

‐ no vmguest.iso anymore…

Hyper-V (2)• new virtual machine configuration file

‐ binary format for efficient performance at scale

‐ resilient logging for changes

‐ new file extensions .VMCX and .VMRS

• Secure Boot support for Linux‐ kernel code integrity protections for Linux guest operating systems

(Ubuntu 14.04 and later, and SUSE Linux Enterprise Server 12) Set-VMFirmware "Ubuntu" -SecureBootTemplate MicrosoftUEFICertificateAuthority

Hyper-V (3)• Runtime Memory Resize

‐ dynamic memory is great, but more can be done

‐ you can now increase and decrease the memory assigned to virtual machines while they are running (Windows Server Technical Preview guests only)

• Production checkpoints‐ delivers the same Checkpoint experience that you had in Windows

Server 2012 R2, but now fully supported for production environments

‐ you can choose, and checkpoints can be „turned off” also

‐ uses VSS instead of Saved State to create checkpoint

‐ restoring a checkpoint is just like restoring a system backup

‐ "ON" by default!

Hyper-V (4)• hot add/remove of network adapters

‐ network adapters can be added and removed from Generation 2 virtual machines while they are running

• network adapter naming‐ you can name individual network adapters in the virtual machine

settings – and see the same name inside the guest operating system

‐ host: Add-VMNetworkAdapter -VMName "TestVM" -SwitchName "Virtual Switch" -Name "Fred" -Passthru | Set-VMNetworkAdapter -DeviceNaming On

‐ guest: Get-NetAdapterAdvancedProperty | ?{$_.DisplayName -eq "Hyper-V Network Adapter Name"} | select Name, DisplayValue

DEMOHyper-V

Windows Defender• by default:

‐ installed and functional GUI not installed

‐ real-time monitoring enabled & default exclusions included

‐ Windows Update (definitions) disabled

• manage it by using WMI, Windows PowerShell, or by using Group Policy

• list of available cmdlets‐ http://technet.microsoft.com/library/dn433280.aspx

* http://technet.microsoft.com/en-us/library/dn765478.aspx

DEMOWindows Defender

Remote Desktop Services• RemoteFX capabilities that improve the experience in a Windows

VDI environment and support OpenGL and higher memory‐ support for OpenGL 4.4 and OpenCL 1.1 API

‐ configurable, larger dedicated video memory larger dedicated VRAM and configurable VRAM

‐ performance improvements targeting stability and application compatibility

• MultiPoint Services role in Windows Server‐ new role

‐ enabling „DaaS” for classrooms and Point-of-Sale in Retail and SMB

‐ no more „20 users per MultiPoint Server limit”* http://blogs.msdn.com/b/rds/archive/2014/10/27/announcing-the-multipoint-services-role-in-window-server-vnext-technical-preview.aspx

DEMOMultiPoint Services

Storage Services (1)• Storage Quality of Service (QoS)

‐ centrally monitor end-to-end storage performance and create policies using Hyper-V and Scale-Out File Servers

‐ policy specifies a reserve (minimum) and a limit (maximum) to be applied to a collection of data flows, such as a virtual hard disk, a single virtual machine or a group of virtual machines, a service, or a tenant

‐ PowerShell or WMI examples:

https://gallery.technet.microsoft.com/scriptcenter/Storage-QoS-script-for-a0d26330

‐ if multiple virtual hard disks share the same policy, performance is fairly distributed to meet demand within the policy minimum and maximum

* http://technet.microsoft.com/en-us/library/dn765475.aspx

Storage Services (2)‐ provided by Scale Out File Servers and Hyper-V

‐ Scale Out File Server exposes file shares to the Hyper-V servers using the SMB3 protocol

‐ a new Policy Manager has been added to the File Server cluster, which provides the central storage performance monitoring

‐ as Hyper-V servers launch virtual machines, they are monitored by the policy manager

‐ the Policy Manager will communicate the Storage QoS policy and any limits or reserves back to the Hyper-V server, which will control the performance of the virtual machine as appropriate

‐ when there are changes to Storage QoS policies or to the performance demands by virtual machines, the policy manager will notify the Hyper-V servers to adjust their behavior

‐ this feedback loop ensures that all virtual machines perform consistently according to the Storage QoS policies defined

* http://blogs.technet.com/b/josebda/archive/2014/10/24/storage-quality-of-service-guide-released-for-windows-server-technical-preview.aspx

Storage Services (3)• Storage Replica (SR)

‐ new feature that enables storage-agnostic, block-level, synchronous replication between servers for disaster recovery, as well as stretching of a failover cluster for high availability

‐ provide an all-Microsoft disaster recovery solution for planned and unplanned outages of mission-critical workloads

‐ use SMB3 transport with proven reliability, scalability, and performance

‐ stretch clusters to metropolitan distances

‐ use Microsoft software end to end for storage and clustering, such as Hyper-V, Storage Replica, Storage Spaces, Cluster, Scale-Out File Server, SMB3, Deduplication, and ReFS/NTFS

* http://technet.microsoft.com/en-us/library/dn765475.aspx

Storage Services (4)‐ helps to reduce cost and

complexity: hardware agnostic, no

requirement for a specific storage configuration like DAS or SAN

allows commodity storage and networking technologies

ease of graphical management for individual nodes and clusters through Failover Cluster Manager

includes comprehensive, large-scale scripting options through Windows PowerShell

provides supportability, performance metrics, and diagnostic capabilities

http://go.microsoft.com/fwlink/?LinkID=514902

DEMOStorage QoS

Failover Clustering (1)• Cluster Operating System Rolling Upgrade

‐ easily upgrade a Hyper-V or Scale-Out File Server failover cluster (without downtime)

‐ upgrade phases (for each node in a cluster): the node is paused and drained of all virtual machines that are running on it

the virtual machines (or other cluster workload) are migrated to another node in the cluster

the existing operating system is removed and a clean installation of the Windows Server Technical Preview operating system on the node is performed

the node running the Windows Server Technical Preview operating system is added back to the cluster

• at this point, the cluster is said to be running in mixed mode, because the cluster nodes are running either Windows Server 2012 R2 or Windows Server Technical Preview

Failover Clustering (2) the cluster functional level stays at Windows Server 2012 R2

• new features in Windows Server Technical Preview that affect compatibility with previous versions of the operating system will be unavailable

eventually, all nodes are upgraded to Windows Server Technical Preview

cluster functional level is then changed to Windows Server Technical Preview using the Windows PowerShell cmdlet Update-ClusterFunctionalLevel

• at this point, you can take advantage of the Windows Server Technical Preview features

‐ all the additional functions (like Cluster-Aware Updating) can be restored again

DEMOCluster Operating System Rolling

Upgrade

Networking (1)• Network Controller

‐ new, highly available and scalable server role

‐ provides the point of automation that allows you to configure, monitor, and troubleshoot

Virtual networks

Physical networks

Network services

Network topology

IP address management

‐ manage your datacenter network with Network Controller by using management applications, such as System Center Virtual Machine Managerand System Center Operations Manager* http://technet.microsoft.com/en-us/library/dn823752.aspx#bkmk_networkcontrol

Networking (2)‐ allows you to configure, monitor, program, and troubleshoot the

network infrastructure under its control

‐ can also expose the network infrastructure to network aware applications, such as Microsoft Lync and Skype

‐ example: Administrator uses a Management Tool

that interacts directly with Network Controller

Network Controller provides informationabout the network infrastructure, includingboth virtual and physical infrastructure, tothe Management Tool, and makesconfiguration changes according to theAdministrator’s actions when using the tool

* http://technet.microsoft.com/en-us/library/dn823752.aspx#bkmk_networkcontrol

Networking (3)• Web Application Proxy

‐ preauthentication for HTTP Basic application publishing provides support to publish an app using HTTP basic by enabling the HTTP app

to receive a non-claims relying party trust for the application to the Federation Service

‐ wildcard domain publishing of applications external URL for the application can now include a wildcard to enable you to

publish multiple applications from within a specific domain, for example, https://*.sp-apps.contoso.com which will simplify publishing of SharePoint apps

‐ HTTP to HTTPS redirection

‐ publish HTTP applications using pass-through preauthentication

‐ publishing of Remote Desktop Gateway apps

‐ UI improvements* http://technet.microsoft.com/en-us/library/dn765473.aspx

Networking (4)• GRE Tunneling for the Windows Server Gateway

‐ enables connectivity between tenant virtual networks and external networks

‐ GRE protocol is lightweight and supported on most of network devices, so it becomes an ideal choice for tunneling where encryption of data is not required

‐ feature designed to address the following requirements: hosting provider must be able to create virtual networks for forwarding without

modifying the physical switch configuration

hosting provider must be able to add subnets to their externally facing networks without modifying the configuration of the physical switches within their infrastructure

‐ relatively easy to deploy* http://technet.microsoft.com/en-us/library/dn765485.aspx

Networking (5)• DHCP

‐ Network Access Protection (NAP) is deprecated in Windows Server 2012 R2, and in Windows Server Technical Preview the DHCP Server role no longer supports NAP (DHCP scopes cannot be NAP-enabled)

• DNS‐ DNS Policies

you can configure the DNS server to control the responses to DNS queries

DNS responses can be based on the public IP address of the DNS client, the time of the day, or several other parameters

they enable location-aware DNS, traffic management, load balancing, and other scenarios

‐ no PowerShell support yet!* https://indico.dns-oarc.net/getFile.py/access?contribId=39&sessionId=3&resId=1&materialId=slides&confId=20

PowerShell 5.0 (1)• you can now use classes (Class, Enum)

‐ formal syntax and semantics similar to other OOP languages

• new module Microsoft.PowerShell.Archive‐ compress, extract and update files and folders into archive (ZIP) files

• new module OneGet‐ discover and install software packages on the Internet

• New-Item, Remove-Item, and Get-ChildItem‐ create and manage symbolic links

• detailed script tracing‐ lets you enable detailed tracking and analysis of Windows PowerShell scripting use

• … and many more* http://technet.microsoft.com/library/hh857339.aspx#BKMK_new50

PowerShell 5.0 (2)• OneGet workflow

‐ load OneGet module in PowerShell

‐ use a Provider for each Package Manager that plugs into OneGet

‐ package manager will then query its software repository to retrieve the package

‐ package manager downloads a configuration file OR get the URI where it will find the instruction to install the package

‐ provider will then execute the configuration file and download the actual software (+ its dependencies) from a repository, and install it

* http://www.lazywinadmin.com/2014/04/powershell-playing-with-new-oneget.html

DEMOOneGet & PowerShell

Important issues• current issues:

‐ computer authentication

‐ restart after installing the Failover Clustering feature

‐ cannot access Apple file servers running SMB 2.0 or later

‐ must disconnect all USB monitors or docking stations prior installation

‐ WSUS post-installation may fail

‐ GUI „bugs”

‐ OneGet issues (https://github.com/OneGet/oneget/issues/73)

‐ …

• http://technet.microsoft.com/en-us/library/dn765470.aspx (continuously updated)

Next steps…• download the Technical Preview installation bits

‐ http://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-technical-preview

• read the Release Notes‐ http://technet.microsoft.com/en-us/library/dn765470.aspx

• look at the roadmaps‐ http://

blogs.technet.com/b/server-cloud/archive/2015/01/30/windows-server-and-system-center-roadmap-update.aspx

‐ http://blogs.windows.com/business/2015/01/30/windows-10-for-enterprise-more-secure-and-up-to-date/?WT.mc_id=Blog_ServerCloud_Announce_CEA

• start testing, but do not put it in production!

THANK YOU!

© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.