Windows Server 2008 R2 Hyper-V 規劃企業高可用度虛擬化環境 馮立偉 台灣微軟資深講師

議程大綱 – Part I Windows Server Failover Cluster 了解硬體及軟體需求 部署高可用度應用程式 了解其實 clustering 並不難懂跟建置

議程大綱 - Part II 規劃高可用度模式 驗證及了解被支援原則 了解 Live Migration 部署規劃 VM 移轉原則 資料中心管理性

快速建置高可用度伺服器環境

規劃Failover Clustering TechEd 2011 11/14/2018 規劃Failover Clustering 部署Failover Cluster 管理 Failover Cluster © 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

規劃 Failover Clustering Failover Cluster: 為何我需要使用 ? Windows Server Failover Cluster: 兩個或多個互相連結的 Server 一起運作提供 “高可用度” (‘High Availability’) 高可用度: 高可用度目的 (HA) 是降低系統, 應用程式, 服務, email, 資料庫, 檔案伺服器 & 印表機伺服器的 “Down time”

規劃 Failover Clustering 停機 (Downtime) 的原因 資料毀損 硬體故障 應用程式壞掉 人為造成 系統維護 站台毀損

規劃 Failover Clustering 甚麼是移轉 (Failover) ? 有東西不正常 ! 私有網路 公開網路

規劃 Failover Clustering 硬體: 我需要甚麼硬體才能做 HA ? TechEd 2011 11/14/2018 規劃 Failover Clustering 硬體: 我需要甚麼硬體才能做 HA ? Servers: 2008 R2 Cluster Support 只有兩個基本需求 所有元件都要符合以下規範 http://server.windowsmarketplace.com/Server Storage (SAN, iSCSI Target) Network Interface Card (NIC) Host Bus Adapter (HBA) * NIC Teaming Software * MPIO/DSM (Multipathing Software) 必須通過 Cluster 驗證 http://technet.microsoft.com/en-us/library/cc732035.aspx * Optional. Multi-pathing and NIC teaming software are not required but can enhance fault tolerance. © 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

規劃 Failover Clustering 硬體: 我需要甚麼硬體才能做 HA ? 網路: 在結點 (node) 間至少要有兩個網路且各自獨立 多個網路已增加 redundancy Public Network * Internal Cluster Network * Hyper-V Live Migration & Management iSCSI Network Virtual Machine Network DHCP 或固定 IP Addresses NIC Teaming: 幫助增加備援 * Recommended requirements. Additional networks can enhance high availability and separate network roles

規劃 Failover Clustering 硬體: 我需要甚麼硬體才能做 HA ? 共同儲存裝置 Shared Storage 支援的 Shared Storage 種類 iSCSI SAS Serial Attached SCSI Fiber FCoE Fiber Channel over Ethernet NEW!

規劃 Failover Clustering iSCSI Target Software 低成本, block-level 儲存機制 : 而非昂貴的 SAN 提供 shared storage 給 Hyper-V 以啟動 HA 及 live migration 提供 shared storage 給放在 Windows Failover cluster 上執行的應用程式 Microsoft iSCSI Software Target 3.3 iSCSI Target Software (免費且佛心來的 !) http://www.microsoft.com/downloads/en/details.aspx?FamilyID=45105d7f-8c6c-4666-a305-c8189062a0d0

規劃 Failover Clustering 安裝 iSCSI 3.3 demo

規劃 Failover Clustering iSCSI Target Software 指派裝置給 initiator 建立一個磁碟服務 *.vhd iSCSI Initiator Software iSCSI Target Software OS 偵測到新的本機硬碟

規劃 Failover Clustering 軟體: 我需要甚麼 ? Windows Server 版本支援 Failover Clustering Windows Server 2008 & R2 Datacenter (Core or Full) Windows Server 2008 & R2 Enterprise (Core or Full) Microsoft Hyper-V Server 2008 R2 – 免費 (Core) R2 R2

規劃 Failover Clustering Server Core ? 支援 HA ! 移除不需要的服務及程式 : 無 Internet Explorer, Windows Media Player, etc. 較小的 “攻擊面積” 及更好的穩定度 更少的 Patch 較少的元件表示更少掛掉的機會 遠端圖形管理介面 : Remote Server Administrator Tools (RSAT)

規劃 Failover Clustering 建立 iSCSI 磁碟 建立 iSCSI Target demo

規劃 Failover Clustering 準備網路 公開 固定或 DHCP Default gateway 私有 IPv6 preferred or non routable IPv4 無 default gateway 跟公開網路分開

規劃 Failover Clustering 準備 Shared Storage Online disk 初始化選用 MBR or GPT 建立 “New Simple Volume” NTFS 格式化 指派磁碟機代號, mount point, 或不指定

規劃 Failover Clustering 設定 iSCSI Disks demo

規劃 Failover Clustering 整合所有元件 Server Network Card NIC Teaming Host Bus Adapter Multipathing Storage iSCSI Initiator

規劃 Failover Clustering 改善 Single Points of Failure The stuff on this slide High Availability 網路 NIC Teaming Redundant Switches 儲存裝置 Hardware RAID Switched Fabric Multipathing SAN Replication 其他 Backup Power Supply Server Level Backup Data Level Backup The High Availability Equation

規劃Failover Clustering

部署 Failover Cluster 測試: 如何知道運作正常? 驗證 完整的測試以確保cluster 功能及相容性 提供方法修正問題 驗證不只是確保你可以得到微軟的支援, 還可以讓你有信心你的 Cluster 可以正確的工作 我何時需要做驗證 ? 新的 cluster 硬體改變 除錯

部署 Failover Cluster Cluster 驗證 demo

部署 Failover Cluster 使用者權限 Domain Admin 不需要額外權限 非 Domain Admin 登入的網域帳號需要有所有 Cluster 機器上的本機管理員權限 必須要有電腦 OU 上 ‘Create Computer Objects’ 及 ‘Read All Properties’ 權限

部署 Failover Cluster Active Directory 帳號 Cluster 使用登入的帳號來建立 Cluster電腦帳號 l 被建立的電腦帳號跟 Cluster 同名. Cluster Name Object (CNO)

部署 Failover Cluster Active Directory 帳號 Clustered service or application 建立的帳號: Virtual Computer Object (VCO) 管理者用擁有合適權限的帳號登入, 然後建立 HA 應用程式. Active Directory Services and Applications 精靈使用 Cluster Name Object 建立另一個帳號 被建立的電腦帳號跟 Cluster 同名. Cluster Name Object (CNO)

部署 Failover Cluster 安裝及設定 Failover Clustering TechEd 2011 11/14/2018 部署 Failover Cluster 安裝及設定 Failover Clustering 從伺服器管理員加入 Failover Clustering 功能 執行 ‘Validate Cluster’ 精靈 在其中一個節點執行 ‘Create Cluster’ 精靈 在 Failover Cluster Manager 中使用 ‘High Availability’ 精靈建立你的 HA App 全部都是使用精靈 © 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

部署 Failover Cluster Create Cluster Wizard demo

規劃Failover Clustering Agenda 規劃Failover Clustering 部署Failover Cluster 管理 Failover Cluster

管理 Failover Cluster 支援角色 TechEd 2011 11/14/2018 管理 Failover Cluster 支援角色 Common Hyper-V SQL Server Exchange File Server Print New for 2008 R2 DFS-Replication Remote Desktop CB 3rd Party Many different roles Other In-box Support DFS-Namespace DHCP DTC iSNS MSMQ NFS WINS Generic Containers Generic Application Generic Script Generic Service Other Server © 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

管理 Failover Cluster 管理方式 Failover Cluster Manager Scripting PowerShell WMI Remote Server Administration Tools (RSAT) System Center Operations Manager (SCOM) Virtual Machine Manager (SCVMM) Integrated Tool Experience

管理 Failover Cluster Cluster 群組 包含 ‘資源’ 來顯示: Client 端如何連? 網路名稱及 IP 那些是 “highly available”? 服務或是 AP ? 資料存在哪 ? 實體磁碟分享給所有節點

管理 Failover Cluster Group Failover Failure Detected!! 私有網路 IP: 10.0.0.30 Network Name: \\FileServer1 Disk X: Sharename: \Users 公開網路 \\FileServer1\Users \\FileServer1\Users \\FileServer1\Users

建立HA File Server 測試 HA File Server Failover 管理 Failover Cluster 建立HA File Server 測試 HA File Server Failover demo

管理 Failover Cluster 虛擬化 虛擬化允許硬體合併, 服務分離 & 降低成本 虛擬機器可以在 cluster 節點中移動 Live Migration 做到移轉時沒有 downtime 完整的 Hyper-V 及 Failover Clustering 整合 支援每個 cluster 1000 個 VMs

管理 Failover Cluster 虛擬化你的 Cluster 我需要一大堆硬體才能做　ＨＡ? That’s Awesome!!

管理 Failover Cluster 站台容錯 節點在不同的實體站台 災難復原規劃

總結 Failover Clustering 提供一個已經被驗證多年可以在企業內運作很好的 HA 機制 更容易設定 : 已簡化軟硬體需求 更容易部署 : 全部精靈化 簡易使用的工具及直覺式的操作 企業內不再需要專職的 “The Cluster Guy” 啦 ! 還在等甚麼, 趕快享受 Cluster 帶來的好處吧 !

Windows Server 2008 R2 Hyper-V 規劃企業高可用度虛擬化環境

11/14/2018 1:59 PM 規劃你的高可用度模式 © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Failover Clustering & Hyper-V HA 私有雲的重要基礎 VM 行動性 提升 VM 可用度 硬體健康偵測 本機 OS 健康偵測 VM 健康偵測 應用程式/服務健康偵測 全自動恢復 部署彈性 擁有可以依據規劃跟意外停機的彈性

Host vs. Guest Clustering Host Clustering Guest Clustering Cluster 服務執行在實體本機以及管理 VMs VMs 可在 cluster 節點中移動 Cluster 服務在 VM 中執行 應用程式跟服務被 VM 中的 Cluster 服務管理 應用程式可在 clustered VMs 中移動 Cluster Cluster SAN iSCSI

Host Clustering提供甚麼 ? 避免 single point of failure : 本機掛掉仍可存活 “不要把雞蛋放到同一了籃子中” 本機掛掉仍可存活 VMs 會從另一節點啟動 重新啟動 VM 時掛掉 VM OS 在同一節點重新啟動 恢復 VM 當機 VM OS在同一節點重新啟動 零停機維護及修補 Live migrate VMs 到其他節點 移動性 & 負載分散 Live migrate VMs 到其他 Server 以便分散 Loading

Guest Clustering 提供甚麼 ? 應用程式健康監控 在 VM 中的應用程式或服務損壞或當掉將自動移到另一個節點的 VM 繼續執行 應用程式健康監控 因為要維護或是修補 VM 所以應用程式移到另一個VM 執行 應用程式移動性 Cluster iSCSI

Guest vs. Host: 健康偵測 Host Hardware Failure Parent Partition Failure Fault Host Cluster Guest Cluster Host Hardware Failure Parent Partition Failure VM Failure Guest OS Failure Application Failure

Host vs. Guest Clustering 總結 Host Clustering VM’s 在 server 間移動 當移動 VM 時無停機時間 可以跟任何應用程式或是 guest OS 一起運作 Guest Clustering Apps 在 VM 間移動 通常移動 AP 時會有downtime 發生 需要 “cluster aware” 應用程式才行 需要兩倍的資源 – 每一個 workload 需要兩個 VMs

整合 Host & Guest Clustering 整合兩個世界的彈性跟保護 VM 在實體節點間的高可用度 & 移動性 應用程式及服務在 VM 間的高可用度 & 移動性 但是 Cluster-on-a-cluster 會提升整個複雜度 Guest Cluster CLUSTER CLUSTER iSCSI SAN SAN

合併實體跟虛擬在同一個 Cluster 中 混合實體 & 虛擬節點是支援的 需要 iSCSI 儲存裝置 情境: 仍然需要通過 “驗證” 備援節點是一個在 Farm 裡面的VM 降低實體備援節點數量 iSCSI

規劃 Guest Cluster 中的系統 SQL File Server Exchange Host 及 guest clustering 支援 SQL 2005 & 2008 支援 guest live & quick migration Support policy: http://support.microsoft.com/?id=956893 File Server 完整支援 Live migration 是一個最好的 File Server 解決方案 : 用來移轉到另一個 File Server 系統而不會中斷 TCP/IP 連驗 Exchange Exchange 2007 SP1, Exchange 2010 HA 支援 guest clustering 不支援混合 Guest & Host Clustering 不支援 mobile VMs 支援原則: http://technet.microsoft.com/en-us/library/cc794548.aspx 其他伺服器產品: http://support.microsoft.com/kb/957006

了解 Live Migration 11/14/2018 1:59 PM © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Live Migrate this VM to another physical machine Live Migration – 啟動移轉 Client accessing VM Live Migrate this VM to another physical machine SAN IT Admin initiates a Live Migration to move a VM from one host to another VHD

Live Migration – 記憶體複製 : Full Copy Memory content is copied to new server VM pre-staged SAN The first initial copy is of all in memory content VHD

Live Migration -記憶體複製 : Dirty Pages Client continues accessing VM Pages are being dirtied SAN Client continues to access VM, which results in memory being modified VHD

Live Migration -記憶體複製 : 增量 Recopy of changes Smaller set of changes SAN Hyper-V tracks changed data, and re-copies over incremental changes Subsequent passes get faster as data set is smaller VHD

Partition State copied Live Migration - 最終移轉 Partition State copied VM Paused SAN Window is very small and within TCP connection timeout VHD

Live Migration – 轉移後: 清除 Client directed to new host Old VM deleted once migration is verified successful SAN ARP issued to have routing devices update their tables Since session state is maintained, no reconnections necessary VHD

11/14/2018 1:59 PM 部署規劃 © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

選擇合適的 Windows Server 授權 No guest OS licenses 4 guest OS licenses Unlimited guest licenses Hyper-V Server Windows Server Enterprise Windows Server Datacenter Host OS is Free Licensed per Server Licensed per CPU 全部包含 Hyper-V, 16 node Failover Clustering, 及 CSV

規劃 Server 硬體 確保處理器相容性 : Live Migration 所有節點處理器需要是同一家廠商產品 不能混合 Intel 及 AMD 在同一個 Cluster 上 可以用 Virtual Machine Migration Test Wizard 來確認相容性 http://archive.msdn.microsoft.com/VMMTestWizard 可以使用 ‘Processor Compatibility Mode 確保相容性

規劃網路設定 至少兩個網路 : 最佳建議 內部 & Live Migration 公開 & VM Guest 管理 公有網路讓 Client 端存取 VMs 內部網路用來做 intra-cluster 通訊 & CSV Hyper-V: Live Migration Hyper-V: VM Guest 管理 儲存裝置: iSCSI SAN 網路

Guest vs. Host: 儲存設備規劃 3rd party replication can also be used Storage Host Cluster Guest Cluster Fibre Channel (FC) Serial Attached SCSI (SAS) Fibre Channel over Ethernet (FCoE) iSCSI 3rd party replication can also be used

規劃虛擬機器密度 每個 Cluster 支援 1,000 VMs 每個節點 384 VM 每個節點 512 VP 12:1 virtual processors per logical (# processors) * (# cores) * (# threads per core) * 12 = total 每個 Cluster 最多 16 個節點 規劃考量: 硬體限制 Hyper-V 限制 預留容量

Cluster Shared Volumes (CSV) 允許多個 Server 同時存取一個共同的 NTFS 磁區 簡化儲存裝置管理 提升敏捷度 SAN

規劃每個 CSV 多少VM 沒有限制每個 CSV 磁區可以有多少個 VM 儲存裝置效能考量 大量 Server 都存取同一個 LUN 11/14/2018 1:59 PM 規劃每個 CSV 多少VM 沒有限制每個 CSV 磁區可以有多少個 VM 儲存裝置效能考量 大量 Server 都存取同一個 LUN 跟你的 Storage 廠商確認 How many IOPS can your storage array handle?

demo 建立 CSV 設定高可用度 VM 11/14/2018 1:59 PM © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/14/2018 1:59 PM VM 移轉規則 © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Active Directory 規劃 所有節點必須是網域成員 所有節點必須在同一網域 需要一個可寫入的 DC 不要虛擬化 “所有” DC DC 需要用來驗證跟啟動 cluster 服務 留至少一個 DC 在實體上

啟動 VMs 到 Preferred Hosts ‘Persistent Mode’ 將嘗試 把VMs 移到原先的節點 只有當整個 Cluster 都啟動 完成後才會生效 防止過度超載被移轉的節點 更好的 VM 分佈

啟動 VM 健康監控 啟動 VM 心跳設定 從本機進行 VM OS 心跳偵測 需要安裝 Integration Components (ICs) 從本機進行 VM OS 心跳偵測 User-Mode Hangs System Crashes CLUSTER SAN

動態記憶體 需要 Windows Server 2008 R2 Service Pack 1 每個節點可以有更高的 VM 密度 升級 ICS 每個節點可以有更高的 VM 密度 記憶體是動態分配給 VMs 確保其他節點擁有足夠的記憶體

demo 測試 Live Migration 11/14/2018 1:59 PM © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/14/2018 1:59 PM 資料中心管理 © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

SCVMM: 快速儲存裝置移轉 移轉VM 儲存裝置到新 的地方 降低移轉時的downtime 單一按鍵操作

SCVMM: 智慧型配置 承載量規劃提升資源運用 移轉 VMs 於節點間 “幾顆星” 讓你清楚做出決定 可調整的判斷邏輯

SCVMM 2012 全新 Cluster 功能 可安裝 SCVMM 到 Failover Cluster 上 簡化安裝 & 部署 Cluster 設定 / 部署 (Bare Metal) 自動維護機制 Cluster patch orchestration 動態最佳化 在節點間負載平衡 VMs Power 最佳化 關閉節點低使用率節點