{"id":14644,"date":"2013-06-04T14:32:19","date_gmt":"2013-06-04T13:32:19","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=14644"},"modified":"2013-06-04T14:32:19","modified_gmt":"2013-06-04T13:32:19","slug":"whats-new-in-windows-server-2012-r2-networking","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=14644","title":{"rendered":"What\u2019s New In Windows Server 2012 R2 Networking"},"content":{"rendered":"<p>Speakers: CJ Williams and Gabriel Silva <\/p>\n<p>What was done in Windows Server 2012:<\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture001.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"picture001\" style=\"border-left-width: 0px; border-right-width: 0px; background-image: none; border-bottom-width: 0px; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; display: block; padding-right: 0px; border-top-width: 0px; margin-right: auto\" border=\"0\" alt=\"picture001\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture001_thumb.jpg\" width=\"504\" height=\"285\" \/><\/a><\/p>\n<p><strong><u>Learning&#8217;s from data centres<\/u><\/strong><\/p>\n<p>MSFT has some massive scale data centres:<\/p>\n<ul>\n<li>Cutting costs: maximal utilization of existing resources, no specialized equipment<\/li>\n<li>Choice and flexibility: no vendor locking, any tenant VM deployed in the cloud<\/li>\n<li>Agility and automation are key: automation for the hoster and tenant networks, including core infrastructure services<\/li>\n<\/ul>\n<p><strong><u>3&#160; areas of focus<\/u><\/strong><\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture002.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"picture002\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; border-left: 0px; display: block; padding-right: 0px; margin-right: auto\" border=\"0\" alt=\"picture002\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture002_thumb.jpg\" width=\"244\" height=\"139\" \/><\/a><\/p>\n<p><strong><u>Virtual RSS (vRSS)<\/u><\/strong><\/p>\n<p>RSS = Receive Side Scaling.&#160; VMs restricted to 1 CPU for network traffic processing in WS2012.<\/p>\n<ul>\n<li>WS2012 R2 takes RSS and enables it in the VM.&#160; vRSS maximises resource utilization by spreading network traffic among multiple VM processors.<\/li>\n<li>Now possible to virtualize traditionally network intensive physical workloads.<\/li>\n<li>Requires no hardware upgrade and works with any NICs that support VMQ.<\/li>\n<\/ul>\n<p>Example usage: network intensive guest apps that need to scale out from just a single vCPU processing interrupts.<\/p>\n<p>DVMQ on the host NICs (for the virtual switch) allows us to use vRSS. <\/p>\n<p><strong><u>NIC Teaming<\/u><\/strong><\/p>\n<p>There is a new Dynamic Mode in WS2012 R2.&#160; This balances based on flowlets.&#160; Optimized utilisation of a team on existing hardware.<\/p>\n<p>You can spread your traffic inbound and outbound.&#160; In WS2012, can only balance on outbound.&#160; EG, 1 VM would be pinned to one pNIC.&#160; Now \u201cflowlets\u201d give the OS much finer grained load balancing, across all the NICs, regardless of what workload you are running.<\/p>\n<p><strong><u>Extended ACLs<\/u><\/strong><\/p>\n<p>In WS2012 you can block\/allow\/measure based on source and destination address (IP or MAC).<\/p>\n<p>In WS2012 R2, you can allow or block for specific worklaods:<\/p>\n<ul>\n<li>Network address<\/li>\n<li>Application port<\/li>\n<li>Protocol type<\/li>\n<\/ul>\n<p>There is now stateful packet inspection, understanding a transaction.<\/p>\n<p><strong><u>Remote Live Monitoring<\/u><\/strong><\/p>\n<p>Remote monitoring of WS2012 traffic can be done, but it is difficult.&#160; In WS2012 R2, you can mirror and capture traffic for remote and local viewing.&#160; GUI experience with Message Analyzer (the new NetMon).&#160; Supports remote offline traffic captures.&#160; Filtering based on IP addresses and VMs.<\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture0031.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"picture003\" style=\"float: none; margin-left: auto; display: block; margin-right: auto\" alt=\"picture003\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture003_thumb.jpg\" width=\"500\" height=\"281\" \/><\/a><\/p>\n<p>&#160;<\/p>\n<p>Configured using WMI, and truncated network traffic redirected ETW events.<\/p>\n<p>Gabe comes up to demo.<\/p>\n<p><strong><u>Demo<\/u><\/strong><\/p>\n<p>Dynamic Mode LBFO will be first.&#160; We see traditional WS2012 NIC teaming.&#160; Dynamic is enabled, and we see all NICs being roughly balanced in PerfMon.<\/p>\n<p>Enabling it in the demo sees throughput go up for the VM \u2013 yes, CPU utilisation goes up in the VM, but that\u2019s why the VM was given more vCPUs to allow more networking resources \u2013 otherwise the traffic is limited by being pinned to a single vCPU.<\/p>\n<p><strong><u>Test-NetConnection<\/u><\/strong><\/p>\n<p>The goal was to make Ping better.&#160; It&#8217;s a new PowerShell cmdlet.&#160; It pings, but it returns back a lot of information: Soutce IP, remote IP latency, test a port, get more detailed info, route information, etc.   <\/p>\n<p>IMO, it\u2019s about damned time <img decoding=\"async\" class=\"wlEmoticon wlEmoticon-smile\" style=\"border-top-style: none; border-left-style: none; border-bottom-style: none; border-right-style: none\" alt=\"Smile\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/wlEmoticon-smile2.png\" \/>&#160; This is a very nice tool, and a nice hook to get people into looking at some basic PowerShell scripting, to extend what the cmdlet can already do by itself.<\/p>\n<p><strong><u>Software Defined Networking (Hyper-V Network Virtualization)<\/u><\/strong><\/p>\n<p>3 promises that the network should provide:<\/p>\n<ul>\n<li>Flexibility: HNV and Virtual Switch<\/li>\n<li>Automation: VMM \u2013 SMI-S, OMI (network devices) and Datacenter Abstraction Layer Putting it all together in VMM)<\/li>\n<li>Control: Partner extensions, e.g. Cisco Nexus 1000V<\/li>\n<\/ul>\n<p><strong><u>SDN should be<\/u><\/strong><\/p>\n<ul>\n<li>Open (DMTF standard for appliance deployment and configuration \u2013 OMI), extensible (virtual switch), and standards based (NVGRE industry standard to encapsulate virtualisation traffic).<\/li>\n<li>Built in and production ready<\/li>\n<li>Innovation in software <em>and <\/em>hardware (pSwitches for example).<\/li>\n<\/ul>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture004.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"picture004\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; border-left: 0px; display: block; padding-right: 0px; margin-right: auto\" border=\"0\" alt=\"picture004\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture004_thumb.jpg\" width=\"504\" height=\"285\" \/><\/a><\/p>\n<p>HNV uses a 24-bit identifier meaning the thing is extremely scalable, when compared to the very limited 4096 possible VLANs.<\/p>\n<p><strong><u>Dynamic Learning of Customer Addresses<\/u><\/strong><\/p>\n<p>HNV can dynamically learn Consumer Addresses being used in the VM Network.&#160; Allows for guest DHCP and guest clusters to be used in HNV VM Networks.<\/p>\n<p><strong><u>Performance<\/u><\/strong><\/p>\n<p>NIC teaming is supported on the host.&#160; NVGRE Task Offload Enable NICs will be able to offload the processing associated with NVGRE.&#160; Emulex and Mellanox are early suppliers.<\/p>\n<p><strong><u>Enhanced diagnostics<\/u><\/strong><\/p>\n<p>A host admin\/operator can use a PoSH cmdlet to test connectivity to a VM, and validate that the VMs can communicate without having access to the VM (network-wise).<\/p>\n<p><strong><u>Hyper-V Extensible Switch<\/u><\/strong><\/p>\n<p>One layer is the forwarding switch.&#160; The Cisco Nexus 100V is out.&#160; NEC has an OpenFlow extension.&#160; In WS2012 R2, the HNV filter is moved <em>into<\/em> the virtual switch.&#160; 3rd party extensions can now work on the Consumer Address and the Provider Address (both VM and physical addresses).&#160; <\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture006.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"picture006\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; border-left: 0px; display: block; padding-right: 0px; margin-right: auto\" border=\"0\" alt=\"picture006\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture006_thumb.jpg\" width=\"244\" height=\"139\" \/><\/a><\/p>\n<p>Example, a virtual firewall extension might want to filter based on CA and\/or PA.<\/p>\n<p>A effect of this is that 3rd parties can bring their own network virtualization and implement it in Hyper-V.&#160; Examples: Cisco CXLan or Open Flow network virtualization.<\/p>\n<p><strong><u>Standards Based Switch Management<\/u><\/strong><\/p>\n<p>Using PowerShell, you can manage physical switches.&#160; Done via Open Management Infrastructure (OMI).&#160; VMM provides automation for this.&#160; Common management infrastructure across vendors.&#160; Automate common network tasks.&#160; Logo program to make switches \u201cjust work\u201d.<\/p>\n<p><strong><u>Built-In Software Gateways<\/u><\/strong><\/p>\n<p>A WS2012 R2 gateway has 3 features:<\/p>\n<ul>\n<li>Site to site multi-tenant aware VPN gateway<\/li>\n<li>Multi-tenant aware NAT for Internet access<\/li>\n<li>Forwarding gateway for in-datacentre physical machine access<\/li>\n<\/ul>\n<p align=\"center\"><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture007.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"picture007\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"picture007\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture007_thumb.jpg\" width=\"504\" height=\"285\" \/><\/a><\/p>\n<p><strong><u>Demo with Gabe<\/u><\/strong><\/p>\n<p>Site-Site g\/w.<\/p>\n<p>2 clients in HNV. Both using different VPN protocols, SSTP and IKEv2.&#160; No access without VPN tunnels.&#160; Connects the VPNs of Red.&#160; Now Red can connect to Red VMs and Blue cannot to anything.&#160; Connects Blue\u2019s VPN and Blue can now connect to Blue VMs.<\/p>\n<p><strong><u>IP Address Management (IPAM)<\/u><\/strong><\/p>\n<p>Added in WS2012, primarily for auditing IP usage and planning.<\/p>\n<p>In WS2012 R2, you can manage IPs in the physical and virtual spaces.&#160; It integrates with SCVMM 2012 R2, and allows you to deploy IP pools, etc.<\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture008.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"picture008\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; border-left: 0px; display: block; padding-right: 0px; margin-right: auto\" border=\"0\" alt=\"picture008\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture008_thumb.jpg\" width=\"504\" height=\"285\" \/><\/a>    <\/p>\n<p><strong><u>Improvements Summary<\/u><\/strong><\/p>\n<p>In my words, WS2012 innovated, and WS2012 R2 has smoothed the corners, making the huge strides in 2012 more achievable and easier to manage.&#160; And a bunch of new features too.<\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture009.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"picture009\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; border-left: 0px; display: block; padding-right: 0px; margin-right: auto\" border=\"0\" alt=\"picture009\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2013\/06\/picture009_thumb.jpg\" width=\"504\" height=\"285\" \/><\/a><\/p>\n<div id=\"scid:0767317B-992E-4b12-91E0-4F059A8CECA8:2dd162e3-5a16-4b5e-ba08-674663c522fe\" class=\"wlWriterEditableSmartContent\" style=\"float: none; padding-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px\">Technorati Tags: <a href=\"http:\/\/technorati.com\/tags\/Event+Notes\" rel=\"tag\">Event Notes<\/a>,<a href=\"http:\/\/technorati.com\/tags\/Windows+Server+2012+R2\" rel=\"tag\">Windows Server 2012 R2<\/a>,<a href=\"http:\/\/technorati.com\/tags\/Networking\" rel=\"tag\">Networking<\/a>,<a href=\"http:\/\/technorati.com\/tags\/Cloud\" rel=\"tag\">Cloud<\/a>,<a href=\"http:\/\/technorati.com\/tags\/System+Center\" rel=\"tag\">System Center<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Speakers: CJ Williams and Gabriel Silva What was done in Windows Server 2012: Learning&#8217;s from data centres MSFT has some massive scale data centres: Cutting costs: maximal utilization of existing resources, no specialized equipment Choice and flexibility: no vendor locking, any tenant VM deployed in the cloud Agility and automation are key: automation for the &hellip; <a href=\"https:\/\/aidanfinn.com\/?p=14644\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;What\u2019s New In Windows Server 2012 R2 Networking&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[14],"tags":[172,176,80,193,120],"class_list":["post-14644","post","type-post","status-publish","format-standard","hentry","category-eventnotes","tag-cloud","tag-eventnotes","tag-networking","tag-system-center","tag-windows-server-2012-r2"],"aioseo_notices":[],"jetpack_featured_media_url":"","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/14644","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14644"}],"version-history":[{"count":0,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/14644\/revisions"}],"wp:attachment":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14644"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14644"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14644"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}