Enterprise Network Administration

and Cyber Security

Virtualization Overview
 Contents to be covered
• What is virtualization
• Its advantages
• Virtualization types
• Terminologies in Virtualisation
• Installation of VMware, Hyper-V, Hypervisor,
 Technology Behind Cloud
• There is some fundamentals going on behind the Cloud

Some sun behind the

clouds?

The Technology for Agility is Virtualization

3
 The Traditional IT Concept

Web Server App Server DB Server EMail

Windows Linux Linux Windows
IIS Glassfish MySQL Exchange

4
If something goes wrong….

Web Server App Server DB Server EMail

Windows DOWN! Linux Windows
IIS MySQL Exchange

5
 The Traditional IT Concept
• Pros
• Easy to conceptualize
• Fairly easy to deploy
• Easy to backup
• Virtually any application/service can be run from this type of setup
• Cons
• Expensive to acquire and maintain hardware
• Not very scalable
• Difficult to replicate
• Redundancy is difficult to implement
• Vulnerable to hardware outages
• In many cases, processor is under-utilized

6
Virtual Server Concepts

7
 Virtualization
• Virtualization is a technology that helps us to install different Operating Systems
on a hardware. They are completely separated and independent from each
other.
• virtualization is a broad term that refers to the abstraction of computer
resources.
• Cloud Computing is build on top of virtualization infrastructure.
• Virtualization is the technology that enables the creation of a virtual (as opposed
to actual) version of something e.g. an operating system, a server, a storage
device or network resources.
• Virtualization is a technology that allows you to transform hardware into
software.
• Virtualization enables you to run multiple applications and operating systems
independently on a single server.
8
 Virtualization
App App App
• Encapsulation of OS, Application, Storage etc.
• Mere files
• One server can have more than one virtual servers.
• A virtual machine can be serviced by one or more host. OS OS OS
• Virtual machine can still referred to by their function.
• Hosts can be added/removed for maintenance/services
• Scalability, User of server templates, Migration Hypervisor

Hardware

Virtualize
d Stack

9
 Virtualization
• Virtualization hides the physical characteristics of computing
resources from their users, their applications or end users. This
includes making a single physical resource (such as a server, an
operating system, an application or a storage device) appear to
function as multiple virtual resources. It can also include making
multiple physical resources (such as storage devices or servers)
appear as a single virtual resource...”.
• Virtualization is often −
• The creation of many virtual resources from one physical resource.
• The creation of one virtual resource from one or more physical
resource
 Advantages of Virtualization:
• Using Virtualization for Efficient Hardware Utilization
• Using Virtualization to Increase Availability
• Disaster Recovery
• Save Energy
• Deploying Servers too fast
• Save Space in your Server Room or Datacenter
 Types of Virtualization:
Today the term virtualization is widely applied to a number of
concepts, some of which are described below −
•Server Virtualization
•Client & Desktop Virtualization
•Services and Applications Virtualization
•Network Virtualization
•Storage Virtualization
 Server Virtualization:
• It is virtualizing your server infrastructure where you do not have to
use any more physical servers for different purposes.
 Client & Desktop Virtualization:
• This is similar to server virtualization, but this time is on the user’s
site where you virtualize their desktops.
 Services and Applications Virtualization:
• The virtualization technology isolates applications from the
underlying operating system and from other applications, in order to
increase compatibility and manageability.
• For example – Docker can be used for that purpose.
 Network Virtualization:
• It is a part of virtualization infrastructure, which is used especially if
you are going to visualize your servers. It helps you in creating
multiple switching, VLAN, NAT-ing, etc.
 Storage Virtualization:
• This is widely used in datacenters where
you have a big storage and it helps you to
create, delete, allocated storage to
different hardware. This allocation is done
through network connection.
• Storage virtualization is "the process of
presenting a logical view of the physical
storage resources to" a host computer
system, "treating all storage media (hard
disk, optical disk, tape, etc.) in the
enterprise as a single pool of storage
 What is a hypervisor?
• A hypervisor, also known as a virtual machine monitor or VMM, is software
that creates and runs virtual machines (VMs).
• A hypervisor allows one host computer to support multiple guest VMs by
virtually sharing its resources, such as memory and processing.
• A hypervisor is a thin software layer that intercepts operating system calls to
the hardware. It is also called as the Virtual Machine Monitor (VMM). It
creates a virtual platform on the host computer, on top of which multiple
guest operating systems are executed and monitored.

Hypervisors are two types −

• Native or Bare Metal Hypervisor or Type 1 Hypervisor
• Hosted Hypervisor or Type 2 Hypervisor
 Native /Bare Metal /Type 1 Hypervisor
Native hypervisors are software
systems that run directly on the host's
hardware to control the hardware and
to monitor the Guest Operating
Systems. The guest operating system
runs on a separate level above the
hypervisor. All of them have a Virtual
Machine Manager.
•Examples of this virtual machine
architecture are Oracle VM, Microsoft
Hyper-V, VMWare ESX and Xen.
 Hosted Hypervisor or Type 2 Hypervisor
• Hosted hypervisors are designed to run
within a traditional operating system.
In other words, a hosted hypervisor
adds a distinct software layer on top of
the host operating system. While, the
guest operating system becomes a
third software level above the
hardware.
• A well-known example of a hosted
hypervisor is Oracle VM VirtualBox.
Others include VMWare Server and
Workstation, Microsoft Virtual PC,
KVM, QEMU and Parallels.
 Types of Hypervisors
Hosted Bare Metal

Hypervisor APP APP

Host OS Hypervisor

▪ VMware player ▪ Sun VirtualBox ▪ VMware ESX

▪ VMware workstation ▪ QEMU ▪ Microsoft Hyper-V
▪ Microsoft virtual PC ▪ KVM ▪ XEN 21 21
 Virtualization- Live Migration

• VMotion is VMWare's technology that enables a virtual computer to

be moved from one physical host server to another, while it is
running and with no interruption in service. This technology is
sometimes called “live migration”
Virtualization- Live Migration

23
 Snapshots

• Snapshots are quick and easy way to save a state of a virtual machine
(VM) before you test a patch, software update or other change. The
Snapshot preserves the state and data of the VM at the current point
in time, so when you are done testing, you can quickly revert the VM
back to a desired state.
• It is a copy of the virtual machine's disk file at a given point in time.
Snapshots provide a change log for the virtual disk and are used to
restore a VM to a particular point in time when a failure or system
error occurs. Snapshots alone do not provide backup.
 Network Bonding (NIC Teaming or NIC Trunking)
• Network Bonding (NIC Teaming or NIC Trunking) is a creation of a single
bonded interface by combining 2 or more Ethernet interfaces. This helps in
high availability of network interface and performance improvements on data
traffic flow.
• Why use Interface bonding?
• The two important reasons to create an interface bonding are :
1. To provide increased bandwidth
2. To provide redundancy in the face of hardware failure
• Bonding aggregate multiple ports into a single group, effectively combining
the bandwidth into a single connection. Network Bonding create multi-gigabit
pipes to transport traffic through the highest traffic areas of your network.
•
 Network Bonding (NIC Teaming or NIC Trunking)

• For example, you can aggregate three 1GBps ports into a 3GBps trunk
port. That is equivalent with having one interface with 3GBps speed.
 Types of Network Bonding
Mode Policy How it works Fault Tolerance Load balancing

0 Round Robin packets are sequentially transmitted/received through each interfaces one by one. No Yes

1 Active Backup one NIC active while another NIC is asleep. If the active NIC goes down, another NIC Yes No
becomes active. only supported in x86 environments.

2 XOR [exclusive OR] In this mode the, the MAC address of the slave NIC is matched up against the Yes Yes
incoming request’s MAC and once this connection is established same NIC is used to
transmit/receive for the destination MAC.

3 Broadcast All transmissions are sent on all slaves Yes No

4 Dynamic Link aggregated NICs act as one NIC which results in a higher throughput, but also provides Yes Yes
Aggregation failover in the case that a NIC fails. Dynamic Link Aggregation requires a switch that
supports IEEE 802.3ad.

5 Transmit Load The outgoing traffic is distributed depending on the current load on each slave Yes Yes
Balancing (TLB) interface. Incoming traffic is received by the current slave. If the receiving slave fails,
another slave takes over the MAC address of the failed slave.

6 Adaptive Load Unlike Dynamic Link Aggregation, Adaptive Load Balancing does not require any Yes Yes
Balancing (ALB) particular switch configuration. Adaptive Load Balancing is only supported in x86
environments. The receiving packets are load balanced through ARP negotiation.
 Types of Clone: Full and Linked
• Full Clone — A full clone is an independent copy of a virtual machine that
shares nothing with the parent virtual machine after the cloning operation.
Ongoing operation of a full clone is entirely separate from the parent virtual
machine. A full clone is an independent virtual machine, with no need to
access the parent.
• Linked Clone — A linked clone is a copy of a virtual machine that shares
virtual disks with the parent virtual machine in an ongoing manner. This
conserves disk space, and allows multiple virtual machines to use the same
software installation.A linked clone must have continued access to the
parent. Without access to the parent, a linked clone is disabled.
• A linked clone is made from a snapshot of the parent.
 Disk Image Files (VDI, VMDK, VHD, HDD)
• Disk Image Files (VDI, VMDK, VHD, HDD)
• Disk image files reside on the host system and are seen by the guest
systems as hard disks of a certain geometry. When a guest OS reads from or
writes to a hard disk, Oracle VM VirtualBox redirects the request to the
image file. Virtual appliance vendors have different formats for laying out
the information contained in a virtual machine disk image.
 What is Intel VT?
• Intel VT (Virtualization Technology) is the company's hardware
assistance for processors running virtualization platforms.
• Intel VT includes a series of extensions for hardware virtualization.
The Intel VT-x extensions are probably the best recognized
extensions, adding migration, priority and memory handling
capabilities to a wide range of Intel processors.
• By comparison, the VT-d extensions add virtualization support to Intel
chipsets that can assign specific I/O devices to specific virtual
machines (VM)s, while the VT-c extensions bring better virtualization
support to I/O devices such as network switches.
 What is AMD-V?

• AMD-V (AMD virtualization) is a set of hardware extensions for the

X86AMD-V (AMD virtualization) is a set of hardware extensions for
the X86 processor architecture. Advanced Micro Dynamics
(AMDAMD-V (AMD virtualization) is a set of hardware extensions for
the X86 processor architecture. Advanced Micro Dynamics (AMD)
designed the extensions to perform repetitive tasks normally
performed by software and improve resource use and virtual
machine (VM) performance.
 Types of Virtualization

• Full Virtualization (Hardware Assisted/ Binary Translation )

• Paravirtualization
• Hybrid Virtualization
• OS level Virtualization
 Full Virtualization:
• Virtual machine simulates hardware to allow an unmodified guest OS
to be run in isolation. There is two type of Full virtualizations in the
enterprise market. On both full virtualization types, guest operating
system’s source information will not be modified.

• Software assisted full virtualization

• Hardware-assisted full virtualization
 Software Assisted – Full Virtualization (BT – Binary
Translation )
• It completely relies on binary translation to
trap and virtualize the execution of
sensitive, non-virtualizable instructions sets.
It emulates the hardware using the software
instruction sets.
• Due to binary translation, it often criticized
for performance issue.
The list of software which will fall under
software assisted (BT).
• VMware workstation (32Bit guests)
• Virtual PC
• VirtualBox (32-bit guests)
• VMware Server
 Hardware-Assisted – Full Virtualization
(VT)
• Hardware-assisted full virtualization
eliminates the binary translation and it
directly interrupts with hardware using the
virtualization technology which has been
integrated on X86 processors since 2005
(Intel VT-x and AMD-V). Guest OS’s
instructions might allow a virtual context
execute privileged instructions directly on
the processor, even though it is virtualized.
• list of hardware-assisted – Full
virtualization which falls under hypervisor
type 1 (Bare metal )
• VMware ESXi /ESX
• KVM
• Hyper-V
 Paravirtualization:
• Paravirtualization works differently from the full virtualization.
• It doesn’t need to simulate the hardware for the virtual machines.
• The hypervisor is installed on a physical server (host) and a guest OS is installed into the
environment.
• Virtual guests aware that it has been virtualized, unlike the full virtualization (where the
guest doesn’t know that it has been virtualized) to take advantage of the functions.
• In this virtualization method, guest source codes will be modified with sensitive
information to communicate with the host. Guest Operating systems require extensions to
make API calls to the hypervisor.
• In full virtualization, guests will issue a hardware calls but in paravirtualization, guests will
directly communicate with the host (hypervisor) using the drivers.
• Lisf of products which supports paravirtualization.
• Xen , IBM LPAR Oracle VM for SPARC (LDOM) Oracle VM for X86 (OVM)
 Types of virtual disks Provisioning
• Three types of virtual disks can be used in a virtual machine in
vSphere:

•Thick Provision Lazy Zeroed

•Thick Provision Eager Zeroed
•Thin Provision
 Types of virtual disks Provisioning
• Thick Provision Lazy Zeroed – this is the default disk type. Space
required for the virtual disk is allocated during creation. The space is
zeroed on command on the first write from the virtual machine. A
virtual disk that is created as 10 GB will consume 10 GB of space on
the datastore, regardless of the actual disk usage in the guest
operating system.
 Types of virtual disks Provisioning

• Thick Provision Eager Zeroed – the space required for the virtual disk
is allocated during the disk creation. The space is zeroed out when
the disk is created. This type of disk takes the longest to create, but
there is a performance increase, since the zeroing process doesn’t
happen at runtime. A virtual disk that is created as 10 GB will
consume 10 GB of space on the datastore, regardless of the actual
disk usage in the guest operating system. Some advanced vSphere
features, such as Fault Tolerance, require that you use this disk type.
 Types of virtual disks Provisioning

• Thin Provision – a disk of this type uses only as much space on the
datastore as needed. This means that, if you create a 10 GB virtual
disk and place 3 GB of data in it, only the 3 GB of space on the
datastore will be used. Note that, although the size will increase as
required, it will not shrink if files within the guest operating systems
are deleted. Thin provisioned disks have the lowest performance of
the three disk types.
 Types of virtual disks Provisioning

Type Creation time Block allocation Zeroing

occurs when each

Thick Provision
fast fully preallocated block is first
Lazy Zeroed
written to

Thick Provision occurs when the

slow fully preallocated
Eager Zeroed disk is created

occurs when
Thin Provision fastest on demand block are
allocated
 Performance

• Eager zeroed thick-provisioned disks are the best for performance

and security, but require enough free storage space and take a lot of
time to be created. Lazy zeroed thick-provision disks are good for
their short creation times, but they do not provide as much speed as
eager zeroed
 Before Installing Virtualbox or Vmware
Player
• Enable CPU virtualization features
• First, you need to enable hardware virtualization features on your CPU
(Central Processor Unit) such as Intel VT-X or AMD-V in UEFI/BIOS of your
physical computer.
• Otherwise, if you run 64-bit guest operating systems, you can get the error:
VT-x is not available.
• If Hyper-V is installed on your Windows machine, uninstall Hyper-V before
installing VirtualBox (otherwise Hyper-V will block hardware virtualization
extensions needed by VirtualBox to run VMs). The majority of modern
processors support hardware virtualization.
 Download Link

• [Link]
[Link]
• [Link]
-[Link]
Thank You
Any Query