Virtualizacin de servidores con el hypervisor de Windows Server 2008 (Hyper-V)

Virtualizacin de servidores con el hipervisor de Windows Server 2008(Hyper-V) P.A.T.lflores@continental.edu.pe

Idea muy novedosaIBM M44/44XIBM CP-40IBM CP/CMSEn 1960!!

EvolucinHardware

Virtualizacin Asistida por HardwareMulticore

64-Bit

Consumo4

Escenarios de Virtualizacin

Pruebas y desarrollo

Continuidad del negocio

Delegaciones Remotas

Consolidacin de Servidores

11/22/2008 11:02 AM 2004 Microsoft Corporation. All rights reserved.This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.5Anillos de Proteccin en IA

6Virtualizacin de una CPUCPUVMMGuestAnillo 0

Traduccin binaria

(Lenta)Anillo 3

Ejecucin Directa

(Rpida)HardwareHipervisor Tipo ISistema OperativoAplicacinSistema OperativoAplicacinAplicacinVirtualizacin Nativa: Hipervisores Tipo IIParavirtualizacin, Hipervisores Tipo IHardwareSistema Operativo AnfitrinAplicacinAplicacinAplicacinHipervisor Tipo II GuestOSAppGuestOSAppAppAplicacinArquitecturas de Hipervisores

Virtual PC VMWARE Workstation VMWare Server (GSX) Virtual Iron, VirtualBox, Parallels, etc. Xen, XenServer VMWARE ESX Logical Domains8Solucin Software para Hipervisores Tipo IIRing CompressionAnillo 0 (Guest Kernel ModeAnillo 1(Guest Kernel Mode)Anillo 3(Guest User Mode)SO GuestVMM.sysAplicaciones VM AdditionsCPUAnillo 0(Guest Kernel Mode)Ejecucin DirectaEjecucin DirectaTraduccin BinariaTraduccin Binaria11/22/2008 11:02 AM 2003-2004 Microsoft Corporation. All rights reserved.This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.9Solucin Hardware: HAVEl procesador le ofrece a la Mquina Virtual el nivel de privilegios esperado (Anillo -1)Elimina la necesidad de hacerlo por softwarePuede mejorar el rendimiento de la mquina Virtual considerablemente

Virtualizacin slo por softwareVirtualizacin asistida por hardware (HAV)10Arquitecturas de hipervisores (Tipo I)MonolticosMas simple que un kernel moderno, pero con cierto nivel de complejidadTiene su propio modelo de driversMicro-KernelFuncionalidad simple de particionadoMayor fiabilidad, con menor superficie de ataqueSin cdigo de tercerosLos drivers corren en cada una de las particionesHypervisorVM 1(Admin)VM 2VM 3HardwareHardwareHypervisorVM 2(Child)VM 3(Child)Virtualization StackVM 1(Parent)DriversDriversDriversDriversDriversDriversDriversDriversDriversDriversDriversDrivers11HypercallsMecanismo por el que las particiones solicitan informacin o acciones del HipervisorActividad del procesadorGestin de la Guest Physical AddressInterrupciones VirtualesControl del procesador virtualControl de particionesMensajes entre particionesEnlightenments11/22/2008 11:02 AM 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.12Requerimientos de Hyper-VHardwareArquitectura x64 (no IA64)Virtualizacin asistida por hardwareIntel-VTData Execution Prevention (DEP) en el hardwareNOTA: La BIOS debe soportar y tener habilitadas estas opciones. Hay que apagar/encender el equipo despus de hacer algn cambio (no basta reiniciar)SoftwareUna edicin x64 de Windows Server 2008Standard/Enterprise/Datacenter/Hyper-V ServerHerramienta: SecurAble http://www.grc.com/securable.htm

DEMOWindows Server 2008VSPWindows KernelArquitectura de Hyper-VAplicacionesAplicacionesAplicacionesNon-Hypervisor Aware OSWindows Server 2003, 2008Windows KernelVSCVMBusEmulacionDesigned for Windows Server HardwareWindows hypervisorXen-Enabled Linux KernelLinux VSCHypercall AdapterParticin PadreParticiones HijasVM ServiceWMI ProviderVM Worker ProcessesOSISV / IHV / OEMMicrosoft Hyper-VMicrosoft / XenSourceUser ModeKernel ModeProporcionado porRing -1IHV DriversVMBusVMBusAplicacionesSyntheticDevicesDriversEmulatedDevicesDrivers11/22/2008 11:02 AMMICROSOFT CONFIDENTIAL 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.15Los Integration Components "Aligeran" los Sistemas Operativos Soportados

11/22/2008 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.16Sistemas Operativos SoportadosPara ellos existen Integration ComponentsWindows Server 2008 x86 y x64, con hasta 4 procesadores virtuales Windows Server 2003 SP2 x86 y x64, con hasta 2 procesadores virtuales Windows Server 2000 SP4, con 1 procesador virtual SUSE 10 SP1 7 SP2, x86 y x64, con 1 procesador virtual Windows Vista SP1 x86 y x64, con hasta 2 procesadores virtuales Windows XP SP3 x86 y x64, con hasta 2 procesadores virtuales Windows XP SP2 x86, con 1 procesador virtual El listado completo est siempre actualizado en:http://support.microsoft.com/kb/954958/en-usCualquier Sistema Operativo basado en x86 o x64 funcionar mediante emulacin, pero beneficindose de las funcionalidades de Hyper-VNo Soportado No FuncionaInstalacin y configuracin de Hyper-V- En una instalacin completa de Windows server 2008- En una instalacin Server Core de Windows Server 2008DEMOPor qu no dehacerse de la particion padre?En un hipervisor monoltico no es posible la defensa en profundidadTodo lo que corre en el hipervisor lo hace en el modo ms privilegiado del sistema!SchedulerMemory ManagementStorage StackNetwork StackVM State MachineVirtualized DevicesBinary TranslatorsDriversManagement APIHardwareRing -1UserModeKernelModeUserModeKernelModeUserModeKernelModeRing 0Ring 3VirtualMachineVirtualMachineVirtualMachine19hipervisor en Micro-kernelDefensa en profundidadUsa la virtualizacin asistida por hardware como proteccinHyper-V no utiliza traduccin binariaSuperficie de ataque muy reducidaSchedulerMemory ManagementHardwareVM State MachineVirtualized DevicesManagement APIRing -1Storage StackNetwork StackDriversUserModeKernelModeUserModeKernelModeRing 0Ring 3Parent PartitionVirtualMachineVirtualMachine20Funcionalidades de Hyper-VParticiones hijas tanto de 32-bit (x86) como de 64-bit (x64)Maquinas Virtuales SMP con 2/4 coresHasta 64 GB de memoria en mquinas virtuales128 VMs en ejecucin concurrente por host, y hasta 512 configuradasAcceso Pass-Through a disco para VMsLive Backup: Integracin con Volume Shadow ServiceEstndar DMTF para interfaz de gestin por WMIPosibilidad de sacar Snapshots de las mquinas virtualesControl flexible de recursosPosibilidad de establecer niveles mnimos y mximos de los recursos de CPU y red.Networking robusto: Soporte a NLB y VLANManipulacin Offline del virtual hard disk (.vhd)Migracin de VMs desde MS Virtual Server

11/22/2008 11:02 AM 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.21Almacenamiento en Hyper-VAlmacenamiento fsicoDirect Attach Storage (DAS): SATA, eSATA, PATA, SAS, SCSI, USB, FirewireStorage Area Networks (SANs): iSCSI, Fiber Channel, SASNetwork Attached Storage (NAS)Almacenamiento VirtualDynamically Expanding Virtual Hard Disks:Hasta 2040 GBFixed Size Virtual Hard Disks:Hasta 2040 GBPass-through disksLa limitacin est realmente en el Sistema OperativoControladoras Virtuales (Sintticas)Virtual IDEHasta 4 dispositivos IDEEl dispositivo de arranque de la VM siempre debe ser IDE (VHD o pass-through)Las VMs pueden arrancar directamente de una LUN de la SANVirtual SCSIHasta 4 controladoras SCSI virtuales, con hasta 64 discos cada unaSi los Integration Components estn instalados, no hay diferencias de rendimiento entre controladoras virtuales IDE y SCSIMs de 512 Tb por VM22Creacin y uso de Mquinas Virtuales en Hyper-V- Creacin de VMs- Creacin de los diferentes tipos de discos- Uso de la consola de Hyper-V- Uso del cliente RDC- SnapshotsDEMO

Hyper-V NetworkingParticin PadreRedes Virtuales enlazadas a NICs fsicasExternas Limitadas por el nmero de NICsInternas IlimitadasPrivadas IlimitadasSolo NICs Ethernet (no Wireless)Soporta VLANsTrunking (VTP Protocol)Mquina VirtualNIC SintticaNIC Legacy (Intel 21140)12 NICs por VM8 sintticas4 legacyHasta 10Gb/sSoporta VLANs

NIC dedicada (Gestin)NIC enlazada a Hyper-V

11/22/2008 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.24Configuracin de la red en Hyper-VDEMOAlta disponibilidadQuick MigrationFuncionamientoSave state: Salva el estado de la Mquina VirtualMover la mquina virtual: Mueve la conexin del almacenamiento al host destinoRestaurar el estado y continuar la ejecucinNo comparable ni a Live Migration ni a VmotionEn todos los casos, si falla el host fsico, las VMs se reiniciarn de nuevo automticamente en el otro nodo

Network ConnectivitySAN Storage

11/22/2008 11:02 AM 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.26Cmo de rpida es la migracin rpida?Bastante rpida!Memoria de laVM1 GbE iSCSI2 Gb FC4 Gb FC512 MB~8 segundos~ 4 segundos~2 segundos1 GB ~16 segundos~8 second~ 4 segundos2 GB~32 segundos~16 seconds~8 segundos4 GB~64 segundos~32 segundos~16 segundos8 GB~2 minutos~64 segundos~32 segundos11/22/2008 11:02 AM 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.27Windows Server 2008 & System Center El Datacenter virtualizado

System CenterConfiguration Manager

System CenterVirtual Machine Manager

System CenterOperations Manager

System CenterData Protection Manager

Ejemplo de Infraestructura de Virtualizacin

Windows Server 2008 x64 Edition EE/DTCQuad Proc/Quad Core con AMD-V o Intel VT128GB de memoria (1TB mximo)2 2Gb FC con MPIO1 NIC dedicada para gestinNICs de 4 puertos dedicadas a VMsGranja de virtualizacin(14 + 2 Servers)

Switch de fibra de 32 puertos

WANReplicacinSANDomainController

32 conexiones

Ethernet28Recursos TechNetTechCenter de Windows Server 2008http://www.microsoft.com/spain/technet/prodtechnol/windowsserver/2008/default.mspxPrximos Webcasts en vivohttp://www.microsoft.com/spain/technet/jornadas/default.mspxWebcasts grabadoshttp://www.microsoft.com/spain/technet/jornadas/webcasts/webcasts_ant.aspxForos tcnicoshttp://forums.microsoft.com/technet-es/default.aspx?siteid=30Registrarse a la newsletter TechNet Flashhttp://www.microsoft.com/spain/technet/boletines/default.mspxObtenga una Suscripcin TechNet Plushttp://technet.microsoft.com/es-es/subscriptions/default.aspx

Operaciones de Virtual Server

Operaciones de la Mquina Virtual

Procesador x86

Virtual Server

Mquina Virtual

Mquina Virtual

Mquina Virtual

Virtual Server

Mquina Virtual

Mquina Virtual

Mquina Virtual

Intel- VT