Managementul infrastructurilor virtualizate folosind familia de produse System Center

Adrian Stoian

Despre clouds

Infrastructură virtualizare

Cluster Hyper-V

SCVMM

Configuration

Manager

Stații de lucru

SAN

Operations

Manager

Service

Manager

Operator

Service Desk

Active

Directory

Storage

SCDPM

CSV

PRO

Agenda

• Windows Server 2008 R2 Hyper-V

• Virtual Machine Manager 2008 R2

• Operations Manager 2007 R2

• Configuration Manager 2007 SP2

• Data Protection Manager 2010

• Service Manager 2010

Windows Server 2008 R2 Hyper-V

Virtualizare

Document redirection

Offline files

Presentation Virtualization

User State Virtualization

Application Virtualization

Desktop Virtualization

Microsoft Virtualization Products From the Datacenter to the Desktop

Server Virtualization

“Having one vendor for the hypervisor, operating system, and much of our application software was very appealing to us from a support and cost perspective.”

Bert Van Pottelberghe, Sales Director, Hostbasket

Windows Server 2008 Hyper-V

OS MS / XenSource Novell

ISV/IHV/OEM Windows Server Virtualization

Parent Partition

Kernel Mode

User Mode

Child Partitions

Applications Applications Applications

Windows Hypervisor

Windows Server 2003,

2008

Windows Kernel V

SC

“Designed for Windows” Server Hardware AMD-V,

Intel VT Chipset

Windows Server 2008

Windows Kernel

Emulation VMBus VMBus VMBus

Hypercall Adapter

Xen-enabled

Linux Kernel

Lin

ux

V

SC

s Non-Hypervisor

Aware OS

Virtualization Stack

WMI Provider

VM Service

VM Worker Process

VSP OS Kernel

Live Migration

• #1 Customer Request

• Moving a virtual machine from one server to another without loss of service

• Enables new dynamic scenarios

− Load balancing VMs via policy

Live Migration

• Live Migration via Cluster Manager

− In box UI

• Live Migration via Virtual Machine Manager

− Orchestrate migrations via policy

• Moving from Quick to Live Migration:

− Guest OS limitations?: No

− Changes to VMs needed?: No

− Changes to Storage infrastructure: No

− Changes to Network Infrastructure: No

− Update to Windows Server 2008 R2

Hyper-V: Yes

Live Migration

1. Create VM on target server

Host 1 Host 2

Blue = Storage

Yellow = Networking

Shared Storage

3. Final state transfer

a) Pause virtual machine

b) Move storage connectivity from source host to target host via Ethernet

4. Run new VM on source; Delete VM on target

2. Copy memory pages from the source to the target via Ethernet

Live Migration Memory Internals

• Worker process on source host creates “dirty bitmap” of

memory pages

− Iterates over pages, sending them to

target worker process

− Registers for modify-notifications on pages to

detect subsequent changes

− Source VM still active and can be modifying memory

− Repeats over newly modified pages

• Stops iterating when one of the following:

− All pages sent

− Makes 10 passes

Live Migration Operation

Server 1 Server 2

Co

nfig

ura

tio

n

Memory

Co

nfig

ura

tio

n

Sta

te

Sta

te

Memory

Migration & Storage

• Windows Server 2008 R2 Hyper-V

− NEW Cluster Shared Volume (CSV)

− CSV provides a single consistent file name space; All Windows Server 2008 R2 servers see the same storage − Easy setup; Uses NTFS

− No reformatting SANs

− Create one big data store

− No more drive letter problems

− Existing tools just work

Cluster Shared Volumes

• All servers “see” the same storage

64 Logical Processor Support

• Overview

− Provides Hyper-V the ability to utilizes up to 64 of the logical processor pool presented to Windows Server 2008 R2

• Benefits

− Significantly increase host server density

− Easily provide multiple processors per virtual machine

Processor Compatibility Mode

• Overview

− Allows live migration across different CPU versions within the same

processor family (i.e. Intel-to-Intel and AMD-to-AMD)

− Does NOT enable cross platform from Intel to AMD or vice versa

− Configure compatibility on a per-VM basis

− Abstracts the VM down to the lowest common denominator in terms of

instruction sets available to the VM.

Benefits

Greater flexibility within clusters

Enables migration across a broader

ranger of Hyper-V host hardware

Microsoft Hyper-V Server 2008

• Simplified, optimized and free

− Provides basic virtualization capabilities

− Great stand-alone hypervisor-based virtualization product

• Streamlined

− Micro-kernelized hypervisor

• Easily integrates into existing infrastructure

− Active Directory integration

− Leverage existing management tools (e.g,: System Center Virtual Machine

Manager 2008)

− Leverage existing support tools & processes

− Leverage existing IT Pro skill-set and knowledge

HVconfig

Automatic startup at login

Easy setup utility for server configuration

Localized in 11 languages

Microsoft Hyper-V Server V2 New features • Live Migration

• High Availability

• New Processor Support

− Second Level Address

Translation

− Core Parking

• Networking Enhancements

− TCP/IP Offload Support

− VMQ & Jumbo Frame Support

• Hot Add/Remove virtual storage

• Enhancements to HVCONFIG

• Enhanced scalability

Hyper-V Server V1 vs. V2

Microsoft Hyper-V Server

2008

Microsoft Hyper-V Server V2

Processor Support Up to 4 processors Up to 8 processors

Physical Memory Support Up to 32 GB Up to 1 TB

Virtual Machine Memory

Support

Up to 32 GB total

(e.g. 31 1 GB VMs or

5 6 GB VMs)

64 GB of memory per VM

Live Migration No Yes

High Availability No Yes

Management Options Free Hyper-V Manager

MMC

SCVMM

Free Hyper-V Manager

MMC

SCVMM

Virtualization Will Drive Major Change in IT Infrastructure and Operations in the Next Three Years,

Tom Bittman, May 8, 2007

Virtualization

“Virtualization without good management is more dangerous than not using

virtualization in the first place.”

– Tom Bittman, Gartner VP AND Analyst,

9 May, 2007

System Center Virtual Machine Manager 2007

Management infrastructuri de virtualizare

System Center Virtual Machine Manager 2008

Live Thumbnail

Hyper-V Cluster

Management Selection

Filters

Context Sensitive Actions

VM Information

VMware Cluster

Virtual Machines Virtual

Server

Virtual Machine Manager Server

Connector

Self Service Web Portal

Administrator’s Console

Management Interfaces

SAN Storage

Operator’s Console

Web Console

Windows PowerShell

Operations Manager Server

Virtual Server Host

VM

VM

VMM Library Server

VM Template

ISO Script VHD

VMware VI3

Virtual Center Server

ESX Host

VM VM VM VM

VM VM VM VM

VM VM VM VM

Windows® PowerShell

VMM 2008 Architecture

System Center Virtual Machine Manager 2008 R2

VMM 2008 Features

Hypervisor Management - Hyper-V, VMware

Cluster Integration

Host Configuration Intelligent Placement

Library Management Deployment and Storage

Virtual Machine Creation/Provisioning Monitoring and Reporting

Conversions: P2V and V2V Automation with PowerShell

Delegation and Self Service Performance and Resource Optimization

New in VMM R2

Management of Windows Server 2008 R2 and Microsoft Hyper-V R2

Multiple Virtual Machines Per LUN

Live Migration Cluster Shared Volumes

Storage Migration Maintenance Mode

SAN Related Enhancements Network Optimizations

Hot Add of Storage Rapid Provisioning

Monitoring and Reporting • Discovery of Hosts, Virtual Machines and

Virtual Machine Manager components

• Performance and Health Monitoring, Reports, etc.

• Application awareness

• Performance and resource calibration and optimization

Performance and Resource Optimization (PRO) • Workload and

application aware resource optimization

• Extensible through the Operations Manager 2007 MP framework

• Create policies that VMM acts upon tips automatically or manually

• Minimize downtime and accelerating time to resolution.

• Enables partners to deliver value add to our mutual customers

Performance and Resource Optimization

System Center Operations Manager 2007

Monitorizare servicii

System Center Operations Manager 2007 R2 • Performance Monitoring

• Event Monitoring

• Alerts

• Knowledge Base

• Automatic Response to incidents

• Distributed Application Designers

• Audit Collection Services

• Agentless Exception Monitoring

Management Group

Monitors (State monitoring)

Object

Security

Health

Configuration

Health

Overall

Health

Availability

Health

Performance

Health

Service

Check Process

Utilization SQL 2005

DB Engine

Unit Monitors

Aggregate

Monitors

Health Model – Roll up

SQL Server

Management Packs • Exchange Server 2003/2007/2010

• Windows Server 2000/2003/2008 AD

• Information Worker

• MS Server 2000/03 OS

• MS Client 2000 XP OS

• Windows Server IIS 2000/2003/2008

• SharePoint Portal Server 2003/2007/2010

• Windows Server 2000/2003/2008 Terminal Services

• SQL Server 2000/2005/2008

• Windows Vista Client/ Windows 7

• Windows Server Update Services 3.0

• Dynamics CRM 3.0

• SMS 2003/Configuration Manager 2007

• Office SharePoint Server 2007/2010

• Windows SharePoint Services 3.0

• Windows DHCP Server 2003/2008

• Windows File Replication Service 2003/2008

• Windows Group Policy 2003/2008

• Windows Print Server 2003/2008

• Biztalk Server 2006

• Forefront for Exchange

• Forefront for SharePoint

• Windows Network Load Balancing

• Identity Integration Server 2003

• Office Project Server 2007

• Windows DNS Server 2003/2008

• Windows Distributed File Systems 2003/2008

• Windows Routing and Remote Access Service 2003/2008

• Windows Distributed Transaction Coordinator 2000/2003/2008

• Computer Cluster Server 2003

• Windows AD Federation Services 2003

• Windows Internet Naming Service 2000/2003

• ISA Server 2004/2006

• Office Live Communications Server 2005/2007

Audit Collection Services

• Optional component in System Center Operations Manager 2007

• Additional server roles in a Management Group: − ACS Collector

− ACS Database

• ACS Forwarder is included in the Operations Manager agent and can be enabled using Enable Audit Collection task.

• Audit Policy needs to be configured using Domain Security Policy or Local Security Policy.

• Plan the audit policy carefully

ACS Architecture

Active Directory

Servers

Auditor

Reports

ACS Database ACS Collector

Workstations

ACS Forwarders

(clients)

One ACS Collector/Database pair for:

• 150 Domain Controllers,

• 3000 Servers or

• 15000 Workstations

Category Domain

Controller

Server/

Workstation

High Security

Workstation

Account Logon Events Success None Success, Failure

Account Management Success None Success, Failure

Directory Services Access Success n/a Failure

Logon Events Success None Success, Failure

Object Access None None None

Policy Change Success None Success, Failure

Privilege Use None None Failure

Process Tracking None None None

System Events Success None None

System Center Configuration Manager 2007

Management sisteme

Configuration Manager 2007 • Product Timeline

− Configuration Manager RTM − Released September 2007

− Significant update to SMS 2003

− Increased capability list

− Service Pack 1 − Released April 2008

− Platform support for Windows Server 2008/Vista SP1

− Asset Intelligene update

− Intel vPro integration

− R2 − Released August 2008

− Application Virtualization Management

− SQL Reporting integration

− Client Status Reporting

− Forefront Client Security Reporting

− SP2 − Released October 2009

− Windows 7 and Windows Server 2008 R2 support

New

R3

Supported Client Numbers

Site Role Maximum # of Client Systems

Hierarchy (Central Site Server) 200,000

Primary Site Server 100,000

System Health Validator 200,000

Management Point 25,000

Distribution Point (Non OSD) 4,000

Distribution Point (OSD) Limited by Network & Disk I/O

State Migration Point Limited by Network & Disk I/O

Software Update Point (WSUS) 25,000

Fallback Status Point 100,000

Branch Distribution Point

Limited by OS License, Network &

Disk I/O

Configuration Manager Site Systems

PXE Service Point

State Migration Point

Software Update Point

Fallback Status Point

Branch DP

Primary Site Server

Configuration

Manager Role

SMS 2003

Equivalent Role

System Health Validator

SQL Server

SQL Server

New Role with

Service Pack 1

• Multicast

• AVM Streaming

New R2

Capability

Reporting

Services point

Management Point

Distribution Point

Reporting Point

Server Locator Point

Asset Intelligence sync point

Out of band service point

Configuration Manager Feature Summary

• Richer knowledge presented, less mouse clicks, stronger wizard guidance, deeper pre-req checks and deployment assistance

Admin UI Improvements

• Attach meaningful business terminology to inventory Asset Intelligence

• Advancements in upgrade reports, virtual support and more HW/SW Inventory

• Significant update, server support, multicast and unknown system support OS Deployment

• Broad integration across ConfigMgr features, built on WSUS, branch, internet based, OSD, DCM Software Update Management

• Integration scenario support for Windows Server 2008 Network Access Protection

• Improvements to a core feature, new virtualization support Software Distribution

• Model based, baseline definitions and regulatory support for system management Desired Configuration Management

• Powerful support for CE, PPC, Windows Mobile devices Device Management

• Now available, strong extension to core product SDK

Configuration Manager Service Pack 1: Feature Summary

•Platform Support for planning, deployment and management of Windows Server 2008

•Support for Site Role infrastructure deployment to Windows Server

Windows Server 2008 Support

• Platform Support for planning, deployment and management of Windows Vista Service Pack 1 Vista SP1 Support

•Major capability update

•Significant Admin Console Upgrades

•New Catalog and License support

•System Center Online synchronization support

Asset Intelligence 1.5

• Feature Integration with Intel vPro Technology Intel AMT Integration

• Small Collection of Customer Design Change Requests Customer DCR

• Service Pack 1 download includes codebase for R2 Infrastructure to

support R2 features

• Small Collection of hotfix and updates to rtm codebase Hotfix Rollup

Configuration Manager R2: Feature Summary

• Seamless integration to Microsoft Application Virtualization

Application Virtualization Management

• Additions of Multicast and Unknown Computer Support

New OSD capability

• Client summary rollup of key performance indicators

Client Status Reporting

• Migration of ConfigMgr reports to robust reporting platform

SQL Reporting Services Integration

• Configuration Pack knowledge of the Forefront client status

Forefront Client security integration

Configuration Manager SP2 • Windows Vista SP2

• Windows Server 2008 SP2

• Windows 7

• Windows Server 2008 R2

Support for new Operating Systems

• OOB Wireless Management: Wireless Profile Management

• End Point Access Control: 802.1x

• Access Monitor: Audit Log

• Remote Power Management: Power State Configuration

Intel AMT Integration Version 2

• Certificate no longer required Asset Intelligence

• Support improvements 64bit Architecture

• Support in infrastructures with Windows 7 and Windows Server 2008 R2

Branch Cache

Configuration Manager R3 • Monitor power state and consumptions

• Create a power management policy

• Apply power management policy

• Check compliance and remediate

• Report saving in power consumption

Power Management

• Focus for R3 is evaluating new systems

• New Collection setting „Fast evaluation‟ Fast Collection Evaluation

• Supports 300,000 clients Scale Improvements

• Add to Collection

• New Collection Resource Management

Improvements

• Prestaged Media OS Deployment

• Forefront Endpoint Protection 2010

• Configuration Manager Dashboard Add-ons

System Center Data Protection Manager 2010

Continuous Data Protection

Arhitectura DPM 2010

Online Snapshots (up to 512)

Disk-based

Recovery

Tape-based

Backup

Data Protection

Manager

Up to

Every 15 minutes

Disaster Recovery

with offsite replication & tape

Data Protection Manager

Active Directory®

System State

file services

System Center Service Manager 2010

Service Desk Integrat

Introducere

• System Center Service Manager este o soluţie de Service Desk integrată

• Importă informaţii din Active Directory, Configuration Manager şi Operations Manager pentru a construi CMDB

• Implementează procese bazate pe ITIL/MOF pentru Incident Management, Problem Management, Change and Configuration Management

• Include un Self-Service Portal pentru utilizatori

Arhitectura Service Manager

Analyst

Consola Authoring

Interfeţe

utilizatori

Sisteme

externe

Self-Service

portal

Infrastructura

Service

Manager Data

Warehouse CMDB

Service Manager SDK Active

Directory

ConfigMgr

OpsMgr

Knowledge

Base

Consola

Service Manager

Conectori

Management

Packs Change

Management

Problem

Management

Incident

Management

Utilizatori IT

Operations

IT business

analysts

Parteneri

Asset

Management

(partner)

Risk &

Compliance

Terminologie

• CMDB – o bază de date ce stochează informaţii despre componentele şi serviciile IT

• CMDB conţine: − Configuration Items (CI)

− Work Items (WI)

− Relaţiile între acestea

• Configuration Items − Componente şi servicii IT

• Work Items − Incidente

− Probleme

− Change Requests

Integrarea cu Active Directory

Creare CI din informaţiile Active Directory

Creare CI din Active Directory

• Import date dintr-un Domeniu sau OU

− Suport pentru forest-uri multiple

• Sincronizare date Active Directory despre:

− User

− Groups

− Printers

− Computers

• Informaţiile de contact pentru utilizatori

• Informaţii organizaţionale (Manager, Dept)

• Adrese de notificare (e-mail, IM)

Configuration Items creaţi de conectorul AD

Integrare cu System Center Configuration Manager

Creare şi actualizare CI în CMDB din System Center Configuration Manager Creare Incidente pentru erorile DCM

Ce se sincronizează? • Sincronizează informaţiile din Configuration

Manager şi creează/actualizează Configuration Items:

− Hardware Inventory

− Software Inventory

− Software Updates

• Dacă există deja CI efectuează merge cu informaţiile existente

• Asset Intelligence top console user este preluat ca utilizator primar

• Crează incidente din erorile de conformitate Desired Configuration Management (DCM)

Creare Incidente din DCM

• Crează Incidente automat pentru erorile de conformitate DCM

− Se selectează Baseline-urile DCM şi CI pentru care trebuie create Incidente

− Conectorul va sincroniza toate erorile de conformitate DCM

− Un workflow va crea Incidente doar pentru erorile DCM selectate

• Va fi generat un incident pentru fiecare computer şi CI neconform

− Poate crea o mulţime de incidente

Integrare cu System Center Operations Manager

Creare şi actualizare CI în CMDB din System Center Operations Manager Creare Incidente din Alerte

Ce se sincronizează?

• Crează CI din obiectele descoperite de Operations Manager

• Crează Service Maps din Servicii şi Distributed Applications definite în SCOM

• Crează Incidente din alertele Operations Manager

− Sincronizează informaţii detaliate despre alerte

− Actualizează starea Alert-ului când sunt modificate proprietăţile incidentului în Service Manager

Definiţii Servicii & Service Maps

• Definiţie Serviciu = Definiţie Business + Definiţie Tehnică

• Definiţia tehnică este colectată din Operations Manager

• Definiţia de business este introdusă manual în consola Service Manager sau importată din alte surse

• Utilă pentru troubleshooting şi analiză de impact

Integrarea cu e-mail

Creare incidente din mesaje e-mail Notificări pe e-mail

Creare incidente din e-mail

• Utilizatorul

− Crează e-mail cu numele incidentului în subiect şi descrierea în corpul mesajului

− Trimite mesajul la o adresă de e-mail predefinită pentru HelpDesk

• Workflow-ul Service Manager

− Crează automat un incident şi populează anumite câmpuri (Title, Description, User) cu informaţiile din e-mail

− Clasifică şi Rutează incidentul către o coadă

• Operatorul

− Recepţionează incidentul şi acţionează

Configurare Notificări

• Configurare canale notificare

− Administration, Notification, Channels

− Create E-mail Notification Channel

• Configurare template e-mail

− Administration, Notification, Templates

− Create E-Mail Template

• Subscriere la notificări

− Administration, Notification, Subscriptions

− Create E-mail Subscription

Configurare Notificări

Creare subscripţie la notificări

Configurare canal notificare

Service Desk Integrat

Active Directory

Configuration Manager

Operations Manager

Operator

Service Manager

Users

User Groups

Computers

Hardware Inventory

Software Inventory

Software Updates

Service Definitions

Service Maps

Incident

Call for

Support

Alert

DCM

non compliance

E-Mail

Verify Configuration

Self-Service

portal

Pozitionare System Center

ENTERPRISE System Management Suite

MIDMARKET Essentials Plus

Monitoring Using Management Packs

Deployment

& Updates

Virtualization Management

Backup & Recovery

500 PCs & 50 Servers

Service Desk

Agenda

• Windows Server 2008 R2 Hyper-V

• Virtual Machine Manager 2008 R2

• Operations Manager 2007 R2

• Configuration Manager 2007 SP2

• Data Protection Manager 2010

• Service Manager 2010

Infrastructură virtualizare

Cluster Hyper-V

SCVMM

Configuration

Manager

Stații de lucru

SAN

Operations

Manager

Service

Manager

Operator

Service Desk

Active

Directory

Storage

SCDPM

CSV

PRO

Apel la actiune

• Participati la laboratoare

• Evaluati produsele System Center

• Apelati la Net Brinel pentru: − Prezentari, demonstratii, discutii 1-la-1

− Realizare Proof of Concepts

− Seminarii si cursuri

− Proiecte de implementare solutii System Center

• Va stam la dispozitie: − Cornel.Moisescu@brinel.ro

− Adrian.Stoian@brinel.ro