{"id":33,"date":"2015-05-05T09:00:00","date_gmt":"2015-05-05T09:00:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/windowsserver\/2015\/05\/05\/enterprise-grade-virtualization-and-next-gen-app-platform\/"},"modified":"2024-03-07T23:42:37","modified_gmt":"2024-03-08T07:42:37","slug":"enterprise-grade-virtualization-and-next-gen-app-platform","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2015\/05\/05\/enterprise-grade-virtualization-and-next-gen-app-platform\/","title":{"rendered":"Enterprise-grade virtualization and next-gen app platform"},"content":{"rendered":"
With the releases of Windows Server 2012 and Windows Server 2012 R2, we made huge improvements across the board in software defined compute, storage, networking and more.\u00a0 We\u2019re regularly hearing about your successes as well as your next round of feature requests J. In these discussions with you, we\u2019ve also noticed the conversation has matured. While virtualization continues to be an important aspect of your infrastructure, I\u2019m rarely asked about feature comparisons at the hypervisor layer anymore. That\u2019s a 2005 conversation. The conversation has shifted from virtualization to cloud, specifically hybrid cloud. It\u2019s in these conversation that we see first-hand that our Microsoft Cloud<\/a> strategy is resonating. Quite simply our goal is to provide you the best cloud whenever and wherever it makes business sense.<\/p>\n With Windows Server 2016 there are three core areas we are focusing on in the world of cloud and virtualization:<\/p>\n Let\u2019s dig into each of these areas for a moment<\/p>\n Providing a platform for next-gen cloud applications<\/span><\/b><\/p>\n Virtualization has been amazing technology for the datacenter, enabling efficiencies and cost savings through increased density and decoupling workloads from physical server hardware. \u00a0\u00a0However, we believe that we have only just started on the journey of unlocking the capabilities of cloud computing.\u00a0 Once you start running applications that were \u201cdesigned for the cloud\u201d on a fabric that was \u201cdesigned for the cloud\u201d you start to enable entirely new levels of efficiency and functionality.<\/p>\n Two big investments that we have made in this area are:<\/p>\n Hyper-V on Nano Server<\/b><\/p>\n Running Hyper-V on Nano Server, a highly focused and small footprint version of Windows Server, brings many benefits to your cloud environment.\u00a0 Physical servers are quicker and easier to deploy, they need less patching and carry less configuration state.\u00a0 This makes it incredibly easy to build true scalable cloud deployments.<\/p>\n Windows Server Containers<\/b><\/p>\n Containers are an exciting new technology for building, testing and deploying applications.\u00a0 Applications are fueling the innovation in today\u2019s cloud-mobile world, and developers hold the keys to the power of those applications. The more streamlined and efficient the process for developers to build and deliver their applications, the faster that more powerful applications can reach the business. This however, has to work across both the developers, and IT who hold the keys when it comes to the infrastructure that the applications will run on.<\/p>\n For the developers, containers unlock huge gains in productivity, and freedom \u2013 the ability to build an application, package within a container, and deploy, knowing that wherever you deploy that container, it will run without modification, whether that is on-premises, in a service provider\u2019s datacenter, or in the public cloud, using services such as Microsoft Azure.\u00a0 These containers don\u2019t have to be deployed independently \u2013 developers can model complex multi-tier applications, with each tier packaged within a container, and these can be distributed across IaaS and PaaS models, again, increasing the overall surface area that the developer can aim for when releasing their application. This powerful abstraction of microservices provides developers with incredible potential to deliver applications more rapidly than ever before.\u00a0 They can\u2019t however, do it without the Operations\u2019 team support.<\/p>\n On the Operations side, they benefit considerably by being able to gain ever higher levels of consolidation for applications and workloads than even virtualization could provide, and in addition, they can put in place a platform that can rapidly scale up and down to meet the changing needs of the business. This standardized platform is easier to manage, yet provides the developers with a consistent environment into which they can simple provide their app, and hit \u2018run\u2019.<\/p>\n Ensuring you can protect your datacenter assets from emerging threats<\/span><\/b><\/p>\n When it comes to datacenter security, one of the key design pillars of Hyper-v is to make virtual machine security on par with the physical machine security. If a physical machine is completely locked down and a hacker cannot gain access through a vulnerability, short of walking in to the datacenter and removing that physical server, it\u2019s safe to assume that particular physical server is secure.<\/p>\n However, any seized or infected host that has been compromised by an attack, now puts the virtual machines at significant risk, as VMs can be copied from storage, over the network.<\/p>\n The flexibility of virtualization also poses a challenge in itself. For instance, without any form of hardware-based verification, which is rare in today\u2019s x86 physical server space, there\u2019s no way to identify legitimate hosts, which have or haven\u2019t been compromised. This means a VM can, in essence, run anywhere.<\/p>\n So what is Microsoft\u2019s approach to protecting virtual machines?<\/p>\n First, by utilizing the power of hardware-rooted technologies, we enable a new Virtual Secure Mode. This protects access to the processes and memory of the virtual machine, from the host itself, completely separating the guest OS, from host administrators. Host administrators cannot access guest VM secrets and can\u2019t run arbitrary kernel mode code.<\/p>\n By implementing a new Windows Server role, the Host Guardian Service, it enables administrators to identify legitimate hosts, and certifies them to run protected virtual machines, known as Shielded VMs.<\/p>\n Finally, by integrating with the underlying hardware, we enable a new virtualized trusted platform module, or vTPM, that, when exposed inside the virtual machine, enables the guest operating system to take advantage of native encryption features such as BitLocker, protecting the valuable information within that shielded virtual machine. Features such as Live Migration still continue to work, and, the traffic is also encrypted, ensuring that even when moving virtual workloads around the environment, the data remains secure and encrypted.<\/p>\n Continuing to deliver a cloud platform that is perfect for your mission critical workloads<\/span><\/b><\/p>\n Third, and in many ways, most importantly we have been investing in continuing to improve the capabilities of Hyper-V as a great platform for your mission critical applications.\u00a0 There are a number of capacities that we have focused on<\/p>\n Workload Availability<\/b><\/p>\n Across the entirety of Hyper-V we have looked for opportunities to reduce and remove times when virtualized workloads are offline, both planned and unplanned.\u00a0 Here is a sample of some of the features and capabilities that increase your workload availability:<\/p>\n Guaranteed Performance<\/b><\/p>\n In Windows Server 2012 R2, we introduced Storage Quality of Service which provided the ability to set hard caps on a per virtual disk basis per host. It\u2019s a good solution for noisy neighbors on the same host and is dynamically configurable. This was a necessary and important step to what we\u2019re delivering in Windows Server 2016, namely, cluster-wide Storage QoS<\/span><\/b> with comprehensive monitoring and flexible and customizable policies. You can set policies at a granular level based on your business needs such as: per VM, per virtual disk, per service or per tenant. At a high level, it looks like this:<\/p>\n\n
\n