12
Windows Server 2012 Hyper-V: Deploying Hyper-V Enterprise Server Virtualization Platform Building Hyper-V infrastructure with secured multitenancy, flexible infrastructure, scalability, and high availability Zahir Hussain Shah 1 enterprise^ I professional expertise distilled PUBLISHING BIRMINGHAM MUMBAI

WindowsServer Hyper-V: Deploying Hyper-VEnterprise

  • Upload
    others

  • View
    49

  • Download
    1

Embed Size (px)

Citation preview

Page 1: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

Windows Server 2012 Hyper-V:

Deploying Hyper-V EnterpriseServer Virtualization Platform

Building Hyper-V infrastructure with secured

multitenancy, flexible infrastructure, scalability,and high availability

Zahir Hussain Shah

1 enterprise^I professional expertise distilled

PUBLISHING

BIRMINGHAM - MUMBAI

Page 2: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

Index

A

ACL (Access Control List) 303

Active Directory Domain Services. See AD

DS

Active Directory Lightweight DirectoryServices. See AD DLS

ADDLS 304

address hash 142

Address Resolution Protocol. See ARP

ADDS 304

advanced network settingsbandwidth management 128

failoverTCP/IP 130-132

hardware acceleration 129

APIs 83,200

Application-consistent replica 82

application programming interfaces. See

APIs

architectural pillars, SCVMM base platformFabric 375,376

Library 377,378

settings 378

VMs and services 373,374ARP 116

ARP spoofing protection 301

Authorization Managerabout 304

for Hyper-V delegation of authority305-309

B

backup and recovery, System Center DPM

used 344-345

backup and recovery, Windows Server

Backup feature used

about 328

features 329,330

installation 330

virtual machine backups, configuring331-338

virtual machine recovery, performing338-344

bare metal hypervisors 23

BCP 21

Best Possible Node option 289

best practices, Hyper-V Replicanetworking 90-92

security 88-90

storage 92

best practices, Hyper-V storage 193-197

Browse button 282

business continuity planning. See BCP

c

CA 82

CAP 104

CAU 299

central processing unit. See CPU

certification authority. See CA

Page 3: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

CLI 151

Client Access Point. See CAP

cloud computing 15

cloud managementapplication owner usage 370

capacity and capability 370

delegation and quota 370

CLR 155

Cluster Aware Updating. See CAUcluster configuration validation

requirement 256

tests, performing 256-259

Windows Server 2012 cluster validation

utility 256

cluster networkingabout 248,249

Hyper-V Cluster Private Network 250

Hyper-V Cluster Public Network 249, 250

Hyper-V Live Migration Network 251

Cluster Shared Volume File System 264

Cluster Shared Volumes. See CSV

cluster storageabout 242

CSV 243

Windows failover cluster shared storage242

command-line interface. See CLI

Common Language Runtime. See CLR

configuration items (CIs) 202

Confirmation screen 258

core components, Hyper-V high availabilitycluster networking 248, 249

cluster storage 242

server hardware 242

CPU 68

CSV

about 16,31,107, 243,244

features 245

requirements 246

working 244

CSVFS 247

CSV requirementsabout 246

networking requirements 247

server requirements 247

storage requirements 247, 248

CSV storage

adding 262-264

highly available virtual machine, creating264-267

Hyper-V replica broker cluster resource,

creating 267, 269

D

DAG 241

DAS 345

Database Availability Group. See DAG

Data Execution Prevention. See DEP

Data Protection Manager. See DPMDEP 38

deployment scenario, Hyper-Vabout 18

business continuity 21

cloud computing 22

disaster recovery 21

physical-to-virtual conversation 19

research and development 20

server consolidation 18,19

virtual-to-physical (V2P) conversation 19

virtual-to-virtual (V2V) conversation 20

deployment scenario, Hyper-V Replicationcloud service provider 85

dispersed datacenters 84

head office 83

hosting provider 84

managed services 84

DHCP 117

DHCP Guard 302

differencing disk 175

Direct Attached Storage. See DAS

disaster recovery (DR) 130

disk space

about 43

guest virtual machine's paging file

requirements 44

physical server's paging file requirements44

disk typesabout 39

Fibre Channel disks 40

SAS disks 40

SATA disks 40

Page 4: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

DPM

about 344

DPM base infrastructure, setting up 346

technical overview 344, 345

DPM base infrastructure, setting updisks, adding 348

DPM agent, installing on Hyper-V host

348

System Center DPM 2012, installing346,347

dynamic disk 173

Dynamic Host Configuration Protocol. See

DHCP

dynamic teaming 141

E

edit disk

compact 183,184

convert 185-187

expand 187-189

emulated devices 29

F

Fabric

networking 376

servers 375

storage 376

fabric managementcluster management 369

dynamic optimization 369

Hyper-V bare-metal provisioning 368

network management 369

power management 369

storage management 369

update management 369

Failover 82

features, Windows Server 2012 Hyper-V

bigger cluster 240

enhanced live migration 239

Guest machine clustering capabilities 239

up-to-date CSV 240

virtual machine failover 241

Fibre Channel disks 40

Fibre Channel Stroage Area Network. See

SAN

Finish button 189

fixed disk

about 174

creating 175

fresh Hyper-V server installation

about 54-56

server manager 56

server manager, using 57-61

G

Get-Command 150

GPU 68

graphics processing unit. See GPU

guest virtual machines safeguarding

filesystem security 314

virtual machine resource access, auditing315

virtual machines, backing up 316

H

hard disk setting, virtual machine

IDE controller 180,181

SCSI controller 182

hardware acceleration

about 129

IPSEC task offloading 129

single root I/O visualization 129,130

virtual machine queue 129

hardware requirements, Hyper-Vdisk type, storage 39

memory, storage 41

networking, storage 41

processor 38

storage 39

hardware requirements, SCVMM 2012 204

HID 29

hosted hypervisors 24

host group properties, customizingcustom properties 215

Dynamic Optimization 213, 214

general 210

Host Reserves 212

network 215

placement rules 212

storage 215

human interface device. See HID

Page 5: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

Hyper-Vabout 16,17

architecture 22

backup considerations 324

deployment scenario 18

features 30,31

hardware requirements 37

software requirements 42

version comparison 44

Windows Server 2012 guest VM support 45

Hyper-V architecture

about 22

child partition 28

diagram 27

Hypervisor 23

parent partition 27, 28

Hyper-V backup

networking considerations 325

software considerations 326

storage consideration 326

Hyper-V backup configuration, DPM

protection groups used

about 348,349

available virtual machines, protecting350-353

standalone virtual machine, protecting354, 355

Windows Server 2012 CSV 2.0, protecting356-358

Hyper-V backup methodologiesoverview 320

VHD/VHDX files, copying 320

virtual machine, exporting 321

virtual machine snapshot 322

VSS aware Hyper-V backups 323

Windows Server Backup feature 323

Hyper-V backup software considerations

about 326

integration services 326

Hyper-V backup storage consideration

about 326

guest virtual machine storage 327

Hyper-V base operating system securityantivirus protection 299

attack surfaces, minimizing 297

Best Practice Analyzer 300

network isolation 297, 298

patch management 298, 299

Hyper-V capabilitiesvirtual machine, creating 159

virtual machines, shutting down 162

virtual machines, starting 163

virtual network switch, attaching to virtual

machine 161

virtual network switch, configuring 161

virtual network switch, creating 160

Hyper-V Cluster Private Network 250

Hyper-V Cluster Public Network 249

Hyper-V extensible virtual network switch

configurationabout 118

host 118

network settings 124

Hyper-V failover cluster

Cluster configuration validation 255

configuring 262

creating 255,259-261

CSV storage, adding 262

disks, preparing 254, 255

networks, preparing 252

nodes level settings, preparing 251

preparing 251

validation requirement 256

Windows Failover Clustering feature,

installing 252

Hyper-V failover cluster network

cluster private, configuring 253

external Hyper-V virtual switch, creating253

external SAN storage connectivity,configuring 253, 254

live migration networks, configuring 253

preparing, as Hyper-V virtual network

switch 252

Hyper-V features

data offloading improvements 34

dynamic memory improvements 32

Hyper-V automation with PowerShell 31

improved network virtualization 33

large sector disks support 34

live storage migration 37

multitenancy 33

NIC teaming 35

replication 34

Page 6: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

resource metering 34

scalable virtualization infrastructure 36

SMB support 37

Virtual Fibre Channel 35

virtual hard disk format 35

virtual switch improvements 36

Hyper-V high availability

challenges 237,238core components 241

overview 236, 237

Hyper-V host

NIC teaming, configuring 136,140,143

Hyper-V host virtual network switch

configuring 118

external 119,121,122internal 122

private 123

types 118

Hyper-V infrastructure

designing 50

designing, solution accelerators 51

Microsoft Solution Accelerators 50

planning 50

Hyper-V installation, Windows Server Core

used

about 61-66

Hyper-V server role, adding 66

Hypervisorabout 23

bare metal type 23

hosted type 24

microkernel type 26

monolithic type 25

Hypervisor infrastructure managementcustom properties 368

HA VMM server 368

PowerShell 368

Hyper-V Live Migration Network 251

Hyper-V networking 111

Hyper-V recovery performing, SystemCenter DPM used

about 358

ILR, performing 364,365virtual machine, recovering to alternate

location 361,363

virtual machine, recovering to originallocation 358-361

Hyper-V Replicaabout 80, 81

best practices 88

configuring 96

configuring, for reverse replication 105

configuring, for standalone virtual

machines 96-103

configuring, for virtual machine replication103

deployment scenario 83

enabling 93

enabling, for clustered Hyper-V servers 95,

96

enabling, for standalone Hyper-V servers

93-95

hardware requirements 82

Hyper-V Replica broker 104

overview 79

setting up 93

software requirements 82

technical overview 86

terminologies 81, 82

Hyper-V Replica broker 87

Hyper-V Replica environment

monitoring 105

Hyper-V Replica virtual machines

Microsoft Hyper-V VMMS logs, reviewing109

performing monitoring 108,109

replication health, checking 106,107

Hyper-V Security hardeningbest practices 295

Hyper-V server role

basic setting, configuring 66, 67

Hyper-V settings 67

Virtual Switch Manager 72

Hyper-V server role installation

about 53

fresh Hyper-V server, installing 54-56

Hyper-V with Windows Server Core,

installing 61

role installation requirements 54

Hyper-V settingsabout 67

live migration 69

NUMA spanning 69

physical GPUs 69

Page 7: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

replication configuration 71, 72

storage migration 70

virtual hard disks 68

virtual machines 68

Hyper-V storageabout 165,167best practices 192

Hyper-V Virtual Fibre Channel 168

larger VHD support 169

live storage migration 170

problems 167

SMB-based virtual machine storage 170

Virtual Fibre Channel connectivity 168

Hyper-V Virtual Fibre Channel

working 168

Hyper-V virtual machine backup and

recovery

implementing 328

System Center DPM, using 344

Windows Server Backup feature, using 328

Hyper-V virtual machine network settingsadvanced network settings 127

configuring 124

virtual network adapter types 124

Hyper-V virtual network switch

about 114

ARP/ND poisoning (spoofing) protection116

bandwidth management 115

extensible switch 116

feature 114

load balancing 114,115

NIC teaming 114,115

portACLs 117

service quality 115

single root I/O 116

trunk mode 117

Hyper-V virtual network switch securityabout 301

ARP spoofing protection 301

DHCP Guard 302

port mirroring 303

Router Guard 302

Hyper-V virtual storageabout 171

types, virtual disk 172

types, virtual disk formats 171

Hyper-V virtual switch

network traffic monitoring 117

technical overview 111-113

Hyper-V Windows Server 2012 guest VM

supportclient operating system 45

server operating system 45

I

IaaS 85,117

IDE controller 180

ILR 358

Information column 292

Infrastructure as a Service. See IaaS

inspect disk

using 189-192

Internet Protocol (IP) 117

Item level recovery. See ILR

L

LACP 141

LBFO 134

legacy Hyper-V servers upgradation, to

Windows Server 2012

about 51

cluster servers, upgrading 53

standalone server, upgrading 52

LibraryCloud Libraries 377

Library Servers 378

profiles 377

Self-Service Content 377

template 377

Update Catalog and Baselines 378

licensing 46

Link Aggregation Control Protocol. See

LACP

Load Balancing and Failover. See LBFO

load-balancing mechanisms

address hash 142

Hyper-V port 142

Logical Unit Number. See LUN

LUN 35,253

Page 8: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

M

MAC 117

management network 297

MBSA 300

MCS 250

Media Access Control. See MAC

microkernel hypervisors 26

Microsoft Baseline Security Analyzer. See

MBSA

Microsoft Cluster Service. See MSCS

Microsoft Management Console. See MMC

Microsoft Network Load Balancing. See

NLB

Microsoft Solution Accelerators

GRC 50

IPD 50

MAP 50

MDT 50

MOF 50

Microsoft System Center Data Protection

Manager. See SCDPM

Microsoft Virtual Machine Manager. See

VMM

Microsoft Windows Clustering Services. See

MCS

MMC 30

Monitoring Tools 108

monolithic hypervisors 25

Move tab 279

MSCS 16,37

multipart! VCD (MPIO) 169

N

NAS 239

Native Command Queuing. See NCQ

NCQ 39

NDIS 36,113

NDP 116

Neighbor Discovery Protocol. See NDP

Network-attached storage. See NAS

Network Device Interface Specification. See

NDIS

network interface card. See NIC

Network settings 215

new features, SCVMM 2012

cloud management 370

fabric management 368, 369

Hypervisor infrastructure management 368

services management 370, 371

New Hard Disk Wizard 176

NIC 29,112

NIC teamingabout 114

architectural consideration 135,136

configuring, for Hyper-V guest virtual

machines 143

configuring, for Hyper-V host 136

implementing, for Hyper-V host and guest133-136

native OS feature 134

requirements 135

NIC teaming advanced settingsload-balancing mechanisms 141

NIC teaming mode 140

NIC teaming configuration, for Hyper-Vhost

advanced settings 140

steps 136-139

NIC teaming mode

dynamic teaming 141

static teaming 141

switch dependent 141

switch independent 140

NLB 132

Non-Uniform Memory Access. See NUMA

NPIV 168

N_Port ID Virtualization. See NPIV

NUMA 69

o

OLTA 36

OLTP 36

online transaction analysis. See OLTA

online transaction processing. See OLTP

P

parent partition 27

pass-through disk 176,178

patch management 298

Page 9: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

Performance and Resource Optimization.See PRO

physical-to-virtual (P2V) migration 15,49

Planned failover 82

plugin devices 29

POCs 16

port mirroring ,133

PowerShell

about 147,148

cmdlets 149,150cmdlets pipelining 151,152

scripting 152,153

technical overview 149

version 3.0 overview 153,154

Preboot Execution Environment. See PXE

Primary server 82

PRO 230

processor

about 38

hardware-assisted virtualization 38

hardware-based Data Execution

Prevention 38

proof of concepts. See POCs

Protection tab 350

PXE 126

Q

QoS 115,251

quality of service. See QoS

R

RBAC 304

RDMA 170

RDP 17, 69

Read-Modify-Write. See RMV

Recovery point objective. See RPO

Recovery status tab 364

Recovery time objective. See RTO

Recovery Wizard screen 340

Refresh button 107

Remote Desktop Protocol. See RDP

Remote Direct Memory Access. See RDMA

Remote Server Administration Tools. See

RSAT

Replica server 82

Replication tab 106

research and development. See RnD

Resources tab 231

return on investment. See ROI

reverse replication 105

RMV 35

RnD 195

ROI 18

role-based access control. See RBAC

router guard 133

Router Guard 302

RPO 81

RSAT 62

RTO 81

s

SAN 35,345

SAS disks 40

SATA disks 40

SCDPM 317

SCOM 369

SCONFIG 65

SCSI controller 182

SCVMM

about 62,156, 200

management console, installing 205-208

management server, installing 205-208

Self-Service Portal server, installing 205-208

SCVMM 2012

about 202

Hyper-V delegation of authority 310

installing 202

new features 367

SCVMM 2012 installation

hardware requirements 203, 204

system requirements 203

SCVMM basic settings

configuring 209

SCVMM basic settings configurationcloud, assigning to user group 222, 223

host group properties, customizing 210

host groups, creating 209, 210

host groups, managing 209

Hyper-V host, adding 215-218

private cloud, creating 219-221

private cloud, managing 219-221

Page 10: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

Second Level Address Translation. See

SLAT

Self-Service Portal 201. See SSP

Server Core 62

server hardware 242

Server Message Block. See SMB

service-level agreement. See SLA

services management

application deployment 370

custom command execution 371

image-based servicing 371

service template 370

settings

general 378

security 378

Show-Command 153

Single root I/O virtualization. See SR-IOV

SLA 81

SLAT 31

SMB 168,246

software requirements, Hyper-Vabout 42

disk space 44

memory 43

operating system versions 43

Specify Name and Location screen 265

SR-IOV 114

SSP

accessing 228

delegating 228-232

used, for virtual machine creating 233

used, for virtual machine managing 233

Standard replica 82

static teaming 141

storage area network. See SAN

Storage settings 215

storage setting, virtual machine

about 180

disk utilities 183

hard disk settings 180

synthetic devices 29

System Center DPM

features 346

used, for Hyper-V recovery performance358

System Center Operations. See SCOM

System Center Virtual Machine Manager.See SCVMM

system requirements, SCVMM 2012 203

system requirements, Windows Server 2012

PowerShell 3.0

CLR 155

.NET Framework 155

WM1 155

WS-Management 3.0 155

T

Task Definitions tab 307

TCB 25

TechNetURL 159

technical overview, Hyper-V Replicabroker 87

change tracking 87

network module 87

Replication Engine 87

total cost of ownership (TCO) 304

trusted computing base. See TCB

u

usage scenarios, for Hyper-V managementabout 156

cloud management 158

research and development environments

157

virtualized datacenter management 157

V

V2P 19

V2V 20

vDevices

about 29

emulated devices 29

plugin devices 29

synthetic devices 29

virtual machine bus 30

VHD

about 99,166

benefits 169

VHDs 21

Page 11: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

VHD utilities

edit disk 183

inspect disk 189-192

Virtual devices. See vDevices

virtual disk formats

features 171

VHD 172

VHDX 172

virtual disk types

differencing disk 175

dynamic disk 173,174

fixed disk 174

pass-through disk 176,177

Virtual Fibre Channel SAN 178,179

Virtual Fibre Channel SAN 178,179

virtual hard disk. See VHD

virtual hard disks. See VHDs

virtualization securityareas 296

guest virtual machines, safeguarding 314

Hyper-V base operating system, securing297

Hyper-V management, right delegation 304

Hyper-V virtual network switch, securing301

virtual machine storage, securing 311

virtual machine. See VM

virtual machine

creating 72-76

creating, SCVMM console used 223-226

hard drive 78

memory 77

processor 78

storage setting 179

template, creating 226, 227

virtual machine bus 30

virtual machine live migrationabout 270

enabling, on Hyper-V server 273, 274

requirements 272, 273

shared nothing live migration 278-283

SMB shared storage, using 283-285

steps 271

with shared storage 275-277

working 271

Virtual Machine Management Service. See

VMMS

virtual machine migrationlive migration 270

live storage migration 290-292

managing 270

quick migration 286

Virtual machine queue. See VMQvirtual machine quick migrationabout 286

performing, steps 287-289

working 286,287virtual machine storage securityabout 311

default path, specifying 312

encrypting, BitLocker used 313

virtual network adapter typesabout 124

DHCP guard 132

legacy 126

MAC address spoofing 132

NIC teaming 133

port mirroring 133

router guard 133

synthetic 124

virtual storageabout 166,167

types 166

Virtual Switch Managerabout 72

virtual machine, creating 72-77

virtual-to-physical. See V2P

virtual-to-virtual. See V2V

VM 15

VMM 200

VMMcomponentsSelf-Service Portal 201

VMM console 201

VMM database 202

VMM library 202

VMM management server 200

VMM console 201

VMM database 202

VMM library 202

VMM management server 200

Page 12: WindowsServer Hyper-V: Deploying Hyper-VEnterprise

VMMS

about 109, 28

vDevices 29

VMs and services

cloud 374

create 373

Refresh 374

show 374

Windows 374

VMQ 129

Volume Shadow Copy Service. See VSS

VSS 30,82

VSS aware Hyper-V backupsabout 324

online backups, with Hyper-V integrationservices 324

save state backups, with Hyper-Vintegration services 324

w

WFP 36,113

Windows Automated Installation Kit (AIK)204

Windows Filtering Platform. See WFP

Windows® Management Instrumentation.

See WMI

Windows Network Load Balancing. See

WNLB

Windows PowerShell. See PowerShell

Windows PowerShell 3.0

Hyper-V capabilities 159

Windows Remote Management (WinRM)204

Windows Server 2012 113

Windows Server 2012 Backup feature

installing 330

used, for virtual machine backupsconfiguring 331-338

used, for virtual machine recovery perfoing 338-344

Windows Server 2012 Hyper-Vfeatures 239

managing, PowerShell 3.0 used 156

Windows Server 2012 PowerShell 3.0

installing 155

PowerShell OS support 154

system requirements 154

Windows Server Backup feature

ration services 323

Windows Server Core

about 61, 62

benefits 63

configuring 65, 66

Hyper-V server role, adding 66

installing 63, 64

managing 63, 64

used, for Hyper-V installation 61

Windows Server Failover Clustering. See

WSFC

Windows Software Update Service. See

WSUS

WMI 30,155

WMQ 129

WNLB 132

World Wide Name. See WWN

WSFC 87

WSUS 375

WWN 35,168