集英信誠 與大師對談 系列技術論壇 Inception 建構全面虛擬化 講師 : 趙驚人 Virtualization = Resource Sharing 1
伺服器虛擬化的目的 伺服器合併 擺脫硬體 遷移容易 備份容易 虛擬機器佈署快 測試 實驗 2
Hypervisor 類型 Hypervisor Type 1 (Bare-metal) Type 2 (Host-based) Microkernel Monolithic Virtual Server/PC Hyper-V VMWare ESX VMWare GSX/Workstation 虛擬化架構 VM Worker Processes WMI Provider VM Service Applications Applications Applications User Mode Windows Server 2008 VM 1 VM 2 VM 3 VSP VSP VSP VMBus Windows Kernel VSC Windows Kernel VSC Linux Kernel VMBus VMBus VMBus VSC Kernel Mode hypervisor Ring -1 Server Hardware 3
高可用性與負載平衡 Microsoft Failover Cluster Live Migration Quick Migration VMware Cluster HA DRS FT 站台的災難復原 Microsoft Hyper-V Replica VMware VR (vsphere Replication) Site Recovery Manager 4
佈署虛擬化平台 Microsoft 的 Hyper-V WDS System Center Virtual Machine Manager VMware 的 ESXi AutoDeploy 的 Stateful Install 5
軟體定義網路 SDN 的作法 Cisco: 將加強對 VXLAN 及 NVGRE 技術的支援 HP:VAN 架構搭配 IRF 技術, 可將多個實體網路設備虛擬成一台邏輯裝置, 並針對應用程式特性進行調校 IBM:DOVE 技術, 可在 Hypervisor 上模擬出實體網路, 方便網管人員可直接透過軟體來進行網路的設定及服務的佈署 VMware:NVP 平臺可以管理主機與實體網路之間的網路抽象層, 可利用 VXLAN 協定進行虛擬機搬移 微軟 :Hyper-V 3.0 新增虛擬交換器功能, 透過 System Center 2012 虛擬機器管理模組, 可對虛擬機器進行管理, 可利用 NVGRE 協定進行虛擬機搬移 6
網路虛擬化 Blue VM Red VM Virtualization Blue Network Red Network Physical Server Physical Network Server Virtualization Network Virtualization 網路虛擬化 7
虛擬客戶地址 (CA) Provider Address Space (PA) Datacenter Network 192.168.4.11 192.168.4.22 Host 1 Host 2 Blue Blue 10.0.0.5 192.168.4.11 10.0.0.5 192.168.4.11 10.0.0.7 192.168.4.22 10.0.0.7 192.168.4.22 Red Red 10.0.0.5 192.168.4.11 10.0.0.5 192.168.4.11 10.0.0.7 192.168.4.22 10.0.0.7 192.168.4.22 Blue 1 Red 1 Blue 2 Red 2 10.0.0.5 10.0.0.5 10.0.0.7 10.0.0.7 Customer Address Space (CA) 標準封裝 - NVGRE 在 VM 間共享 PA 獲得更加的網路延展 明確的 Virtual Subnet ID 對多租戶有更加的支援 192.168.2.22 192.168.5.55 192.168.2.22 192.168.5.55 GRE Key 5001 GRE Key 6001 MAC MAC 10.0.0.5 10.0.0.7 10.0.0.5 10.0.0.7 192.168.2.22 192.168.5.55 10.0.0.5 10.0.0.5 10.0.0.7 10.0.0.7 10.0.0.5 10.0.0.5 10.0.0.5 10.0.0.5 10.0.0.7 10.0.0.7 10.0.0.7 10.0.0.7 8
封包流向 : Blue1 傳送至 Blue2 10.0.0.5 10.0.0.5 Blue 1 Red 1 where is 10.0.0.7? ARP for 10.0.0.7 10.0.0.7 10.0.0.7 Blue 2 Red 2 VSID 5001 192.168.4.11 Hyper-V Switch VSID ACL Enforcement Network Virtualization IP Virtualization Policy Enforcement Routing NIC VSID 6001 Hyper-V Switch broadcasts ARP to: 1. All local VMs on VSID 5001 2. Network Virtualization filter MAC PA1 OOB: VSID:5001 ARP for 10.0.0.7 Network Virtualization filter responds to ARP for IP 10.0.0.7 on VSID 5001 with Blue 2 MAC VSID 5001 MAC PA2 Hyper-V Switch VSID ACL Enforcement Network Virtualization IP Virtualization Policy Enforcement Routing NIC VSID 6001 192.168.4.2 封包流向 : Blue1 傳送至 Blue2 10.0.0.5 10.0.0.5 Blue 1 learns MAC of Blue 2 10.0.0.7 10.0.0.7 VSID 5001 Blue 1 Red 1 VSID 6001 Hyper-V Switch VSID ACL Enforcement Use MAC B2 for 10.0.0.7 OOB: VSID:5001 Use MAC B2 for 10.0.0.7 VSID 5001 Blue 2 Red 2 VSID 6001 Hyper-V Switch VSID ACL Enforcement Network Virtualization 192.168.4.11 IP Virtualization Policy Enforcement Routing NIC MAC PA1 MAC PA2 Network Virtualization IP Virtualization Policy Enforcement Routing NIC 192.168.4.2 9
封包流向 : Blue1 傳送至 Blue2 10.0.0.5 VSID 5001 Hyper-V Switch 10.0.0.5 Blue 1 Red 1 VSID 6001 VSID ACL Enforcement sent from Blue 1 MAC B1 MAC B2 10.0.0.5 10.0.0.7 in Hyper-V switch OOB: VSID:5001 MAC B1 MAC B2 10.0.0.5 10.0.0.7 10.0.0.7 VSID 5001 Hyper-V Switch 10.0.0.7 Blue 2 Red 2 VSID 6001 VSID ACL Enforcement Network Virtualization 192.168.4.11 IP Virtualization Policy Enforcement Routing NIC MAC PA1 in Network Virtualization filter OOB: VSID:5001 MAC B1 MAC B2 10.0.0.5 10.0.0.7 NVGRE on the wire MAC PA2 Network Virtualization IP Virtualization Policy Enforcement Routing NIC 192.168.4.2 MAC PA1 MAC PA2 192.168.4.11 192.168.4.22 5001 MAC B1 MAC B2 10.0.0.5 10.0.0.7 封包流向 : Blue2 接收 Blue1 10.0.0.5 VSID 5001 Hyper-V Switch 10.0.0.5 Blue 1 Red 1 VSID 6001 VSID ACL Enforcement received by Blue 2 MAC B1 MAC B2 10.0.0.5 10.0.0.7 in Hyper-V switch OOB: VSID:5001 MAC B1 MAC B2 10.0.0.5 10.0.0.7 10.0.0.7 VSID 5001 Hyper-V Switch 10.0.0.7 Blue 2 Red 2 VSID 6001 VSID ACL Enforcement Network Virtualization 192.168.4.11 IP Virtualization Policy Enforcement Routing NIC MAC PA1 in Network Virtualization filter OOB: VSID:5001 MAC B1 MAC B2 10.0.0.5 10.0.0.7 NVGRE on the wire MAC PA2 Network Virtualization IP Virtualization Policy Enforcement Routing NIC 192.168.4.2 MAC PA1 MAC PA2 192.168.4.11 192.168.4.22 5001 MAC B1 MAC B2 10.0.0.5 10.0.0.7 10
遠端桌面連線 RDS Server Manager Remote Desktop Virtualization Host Remote Desktop Web Access Remote Desktop Connection Broker SQL Databas e Remote Desktop Session Host Remote Desktop Gateway Remote Desktop Licensing 11
高可用性 Remote Desktop Remote Remote Web Desktop Desktop Access Web Access Web Access Remote Remote Desktop Desktop Remote Gateway Gateway Desktop Gateway Remote Remote Remote Desktop Desktop Connection Desktop Connection Connection Broker Broker Broker Remote Desktop Connection SQL Cluster Broker Datab ase Remote Desktop Remote Licensing Desktop Remote Licensing Desktop Licensing Remote Desktop Remote Remote Virtualization Desktop Desktop Virtualization Virtualization Host Host Host Remote Desktop Remote Session Desktop Host Remote Session Desktop Host Session Host Session Based Desktop 由伺服器端運算 不同的使用者有不同的設定檔 (Profile) 產品 : Citrix XenDesktop Microsoft Remote Desktop Session Host 12
RD Virtualization Host VM Based Desktop 須有伺服器虛擬化平台作為基礎 用戶端是連至虛擬機器的的桌面 產品 : Microsoft Remote Desktop Virtualization Host VMview Horizon View 13
VM-Based vs Session Based VM-Based vs Session Based VM Based 軟體個別佈署至虛擬機器 虛擬機器可使用用戶端作業系統 軟體相容性高 Session Based 軟體集中佈署至伺服器 使用伺服器作業系統 軟體必須是可共用的 14
桌面虛擬化的延伸 Citrix XenApp Microsoft RemoteApp 程式集中的 RemoteApp 15
RD Web 存取 RemoteApp RemoteApp 16
MED-V & XP Mode Windows 7 在 Windows XP 虛擬機器中執行舊版生產力應用程式 非 IT 管理 : 使用 Windows 7 Pro Windows XP Mode IT 管理 : 使用 MED-V 新增傳遞 原則型準備和集中管理虛擬 Windows XP images MED-V & XP Mode 詳細資訊 MED-V* 集中管理虛擬 Windows 環境 部署 deliver virtual Windows images and customize per user and device settings 準備 define which applications and websites are available to different users 控制 assign and expire usage permissions and Virtual PC settings Maintain and Support update images, monitor users, and remotely troubleshoot *Available post Windows 7 GA as part of Microsoft Desktop Optimization Pack (MDOP) Windows Virtual PC 提供一般使用者簡單使用 在 Windows 7 上執行 Windows XP 或其搭 Windows 環境從 Windows 7 桌面安裝啟動 Windows XP 應用程式 IT 專家 : 使用 MED-V 部署 Windows Virtual PC, 減少複雜性 維護控制 和成本低 17
XP Mode 的原理 XP Mode 的效果 18
使用關鍵平台能力的 VDI 價值 使用者設定檔的磁碟 Maintain user personalization in pooled deployments 公平分享 Dynamically distribute bandwidth, CPU, and disk use 多種儲存選擇 Support direct attached, network, or SAN storage of virtual machines. Automatic Tiering and Deduplication 針對所有角色皆採用高可用性 使用者設定檔的磁碟 VDI Session Host 在虛擬機器集區或工作階段啟用個人化 將使用者資料和設定儲存在分離的虛擬硬碟簡化較低成本的 VDI 佈署 ( 虛擬機器集區或工作階段 ) 19
公平分享 I/O 協助確認跨使用者虛擬機器和工作階段保有高效能 動態分散資源 ( 頻寬 CPU 和 I/O) 套用到工作階段和虛擬機器 多種儲存選擇 Use direct-attached storage, networkattached storage, and clustered or SAN storage Leverage tiered storage to automatically optimize performance Reduce storage cost by leveraging disk deduplication 20
高可用性 Use a scale-out file server and Hyper-V clustering Improve with active/active broker Experience up to 64 nodes and 8,000 virtual machines per cluster with Hyper-V Further increase density by using Remote Desktop Session Host (greater than 2x compared to virtual machines) 元件 settings documents apps Manage 21
UE-V UE-V Settings Store Simple to deploy solution that roams Smart across users synchronization boundaries experiences no matter how you deliver Windows a simple or apps file share 22
簡易佈署 Settings Store Simple file share on your network UE-V Agent Deploy the agent Configure the agent by using Group Policy Template Catalog Create templates with UE-V Generator Deploy custom templates in a file share 23
資料夾重新導向 Folder Redirectio n Provides Offline synchronizes Files users constant helps consistent ensure access users can to work their even documents centralized when across disconnected file devices share Offline Files 24
簡單的組態 Redirection types Basic Advanced Create a file share Configure the GPO Folder Redirection Offline Files Optionally, target the GPO 25
應用程式虛擬化 Centrally Apps follows package users and publish virtual apps with an easy-to-use management console offline App-V Integrated platform Virtual Application Extension Uses the native file system and registry No dedicated drive letter required Flexible virtualization Virtual Application Connection Virtualize a broader range of applications Support for Office 2013 Powerful management New web-based management interface Manage across physical and virtual environments Automation with Windows PowerShell 26
App-V 用戶端儲存空間比較 高階設計 27
Configuration Manager MSI App-V Configuration Manager App-V RDS 28
Windows To Go UE-V + Folder Redirectio n and Offline Files UE-V + Folder Redirectio n and Offline Files App-V App-V FIREWALL Booting from internal hard drive 0110011 1101001 1100100 1000100 1 UE-V + Folder Redirection and Offline Files App-V 0110011 1101001 1100100 1000100 1 Booting from external USB drive BitLocke r 29
伺服器虛擬化 = 成功的 VDI? VDI 沒有什麼壞處. 但它是重量級的. Source: http://itpro.concentratedtech.com/ 伺服器虛擬化 = 成功的 VDI? 30
伺服器虛擬化 = 成功的 VDI? VDI 要成功, 必須還要會 Group Policy Group Policy Preferences 伺服器虛擬化平台 System Center 或其他管理工具 儲存 使用者設定檔 VDI 的應用程式相容性 不是所有應用程式都能執行於 RDS. 無論如何, 被比大部分人想像要做的還多的. 應用程式的問題 非 RDS- 感知的安裝程式 組態放在錯誤的註冊機碼上. 使用者組態放在一般或系統檔案. 在每一個工作階段中沒有隔離管線 埠 共用程式庫 元件. 31
VDI 的應用程式相容性 針對多方面問題的各種解決方案 Application Compatibility Toolkit RDS Application Analyzer Application Repackaging App-V Enhanced Device Compatibility in RDS RemoteFX with Software GPU 32
單一窗口 Auto-Tiering VD DISK POOL Tier 1 Tier 3 VD Storage Profile "High" Tier 2 Storage Profile "Low" VD Storage Profile "Normal" 33
Thin Provision 12TB allocated 1TB Pool Unallocated capacity is available for use by any server 使用快取加速存取 Virtual Disks CPU Poll for Input Output from Cache CPU High-Speed Level 1 Caching Write Coalesce Pre-fetch CPU CPU disk drives 34
資料複寫與高可用性 Cluster *2-clicks animated Shared Virtual Disks iscsi / Fibre Channel SAN DR Site Snapshots, CDP & Migration Caching Caching Synchronous Mirroring Asynchronous Replication Storage devices 快照與資料保護 Snapshots Data Protection 2 AM 35
謝謝您的參與及鼓勵期待明年再相逢!! 36