BranchOffice Szenarios
2 likes•435 views
The document details configurations for branch office scenarios focusing on remote access, hybrid cloud connectivity, and data caching technologies like BranchCache. It outlines methods for securing data transfers, client-server communication, and the effective deployment of hosted cache servers. Additionally, it provides instructions for enabling BranchCache on both file and web servers to enhance performance and scalability within corporate networks.
BranchOffice Szenarios
- 1. Drive your life. Branch Office Scenarios Patrick Sommer [email protected]
- 4. URA URA Hosted Cache Branch Office Headquarters URA Cloud
- 6. Unified State Current State Private Cloud/ HQ Internet DirectAccess & VPN: Remote access: Connecting remote Connectivity using clients to the hybrid dedicated cloud for infrastructure - Managed - Unmanaged Hoster/ Branch Cross premise Site to Site connectivity: using connectivity Connecting private dedicated and public clouds infrastructure Remote Access Unified Remote Access Site to Site
- 7. Contoso Branch Office (10.1.0.0/16) Contoso Corp. HQ (10.0.0.0/16) 10.1.2.0/24 10.1.3.0/24 10.1.3.0/24 S2S LAN DirectAccess Hosters network in cloud
- 8. PowerShell PS> Add-VpnS2SInterface interfacename destinationip -protocol IKEv2 - Authenticationmethod PSK –SharedSecret “abc” –IPv4Subnet 10.1.1.0/24:10 Easy configuration wizard
- 9. DC1 App1 2-App1 Corp-Edge Cloud-Edge Client1 Client2
- 12. Data ID ID ID Search ID Data ID Data ID
- 13. ID Data Data ID Data
- 14. Enterprise Distributed Cache Hosted Cache Data cached amongst clients Data cached at hosted cache server
- 15. BranchCache accelerates e2e encrypted traffic (TLS/HTTPS, IPsec) Cached data encrypted on disk and in transit between clients Prevents unauthorized access to cached data
- 16. BranchCache Security Model Server transmits content information structure to the client only if the client has access. Transfer happens over the accelerated protocol. Server authenticates the client and performs authorization checks. Client downloads encrypted blocks from a peer or the hosted cache and decrypts them with the encryption key. Client uses content information structure to calculate: -segment id (public) Client multicasts the segment id Cached data is stored in -encryption key (private) to find a peer with the data. encrypted.
- 18. Identifiers ID1 ID2 ID3 ID4 ID5 ID6 ID7 ID8 ID9 Block Hashes Blocks Max 128K Fingerprint Used to choose boundaries Content
- 20. Clients use Service Connection Points (SCPs) to discover and connect to hosted cache servers. Hosted cache servers can SCP automatically create SCPs. SCP No site-by-site configuration needed.
- 21. BranchCache cache is encrypted by default. Certificate no longer required on hosted cache server Actually a performance improvement!
- 22. Warm Hosted Cache Data can be exported from “warm” hosted cache servers IIS Hosted Cache File Server Data Packages Data Packages can be imported on New tools let you prehash data on both hosted cache servers and clients file and web servers, and create data packages.
- 25. Hosted cache server can store much more data, increasing bandwidth savings. ESE More efficient architecture based on the Extensible Storage Engine enables a single hosted cache to serve more clients. Multi-TB cache can be spread across disks.
- 26. Clients can be configured to use multiple hosted cache servers in one branch. Existing logic enables retrieval from multiple servers. Uploads done only once. Improves scale and availability without the complexity of clustering.
- 27. DC1 App1 2-App1 Corp-Edge Cloud-Edge Client1 Client2
- 29. Configuring the Configuring the Web Server File Server 1. Install BranchCache for Network 1. Install the BranchCache Files role service feature 2. Enable BranchCache on the server 3. Enable BranchCache on file shares Configuring the Hosted Cache Server 1. Add the BranchCache feature to the Windows Server 2012 server 2. Configure BranchCache with a trusted certificate
- 30. To enable and configure BranchCache, you need to perform the following steps: 1. Enable BranchCache 2. Enable the Distributed Cache mode or Hosted Cache mode 3. Configure the client firewall You can modify BranchCache settings and perform additional configuration tasks, such as: • Setting the cache size • Setting the location of the Hosted Cache server • Clearing the cache • Creating and replicating a shared key for using in a server cluster
- 31. 3rd Party Applications Office CopyFile Explorer WMP IE SCCM WSUS 3rd Party Protocols SMB 2 HTTP BITS Intune BranchCache™ Platform
- 33. Printing directly to a print device (instead of server printer queue) Transparent for user Powershell or Print Management Console (per printer) Limitations Print Queues using printer drivers which support Client Side Rendering (supported since W2K8) Only Network attached printers Quota, auditing and detailed job logging are lost
- 35. BranchCache Overview- http://technet.microsoft.com/en-us/library/hh831696.aspx http://technet.microsoft.com/en-us/library/jj127252.aspx http://technet.microsoft.com/en-us/library/hh831602.aspx http://technet.microsoft.com/en-us/library/jj134152.aspx http://channel9.msdn.com/events/TechEd/Europe/2012/WSV333
- 37. IIS File Server Group Policy Management BitLocker Certificate GPO GPO