Setting up Hyper-V Replica on the Hyper-V hosts

Before you can use Hyper-V Replica, you need to enable the replica server and configure where you want to allow replication to happen from. This can be done over an unencrypted Kerberos connection or a certificate-based (HTTPS) connection. For production environments, it’s recommended to use a certificate-based connection because the replication traffic will be encrypted. For a test or development environment where encryption would introduce overhead, the Kerberos connection would work well. For this example, let’s set up an unencrypted replica.

On the replica server, follow these steps:

1. Open Hyper-V Manager, and right-click the Hyper-V host.
2. Select Hyper-V Settings.
3. Select Replication Configuration and select the Enable This Computer as a Replica Server check box.
4. Select the Use Kerberos (HTTP) check box.
5. In the Authorization and Storage section, select Allow Replication from any Authenticated Server.
6. Set a storage location for the replicated VM hard disks if you want something other than the default.

7. Click Apply, and then click OK.

   Your screen should look similar to Figure 5-1.

Now that the Hyper-V host is set up as a replica, you’ll want to verify that Windows Firewall will allow replication traffic in. There are two rules that you may need to enable:

• Hyper-V Replica HTTP Listener (TCP-In): This rule needs to be enabled if you’re using the Kerberos-based connection.
• Hyper-V Replica HTTPS Listener (TCP-In): This rule needs to be enabled if you’re using the certificate-based connection.

To enable the rule in the Windows Firewall, follow these steps:

1. Click Start, and then click the gear icon to access the Settings menu.
2. Click Network & Internet.
3. On the Status page, scroll down and select Windows Firewall.
4. Click Allow an App through Firewall.

5. Scroll down to Hyper-V Replica and enable the applicable rules.

   I’ve enabled the Hyper-V Replica HTTP rule for the Domain profile, as shown in Figure 5-2.

6. Click OK.

Setting up replication on the virtual machines

After the Hyper-V Replica host is all set, it’s time to configure the VM to replicate to it. Follow these steps:

1. From Hyper-V Manager, right-click the VM and select Enable Replication.
2. On the Before You Begin screen, click Next.
3. On the Specify Replica Server screen, enter the name of the server you configured in the prior section, and click Next.

4. On the Specify Connection Parameters screen, verify that the information presented is correct.

   It should look similar to Figure 5-3 if you’ve been following along.

5. Click Next.

6. On the Choose Replication VHDs screen, select which virtual disks you want to replicate and click Next.

   This will usually be all of them, but you can uncheck one of the drives if you don’t want it to replicate.

   

7. On the Configure Replication Frequency screen, set how much time can be between replication cycles and click Next.

   You can choose among 30 seconds, 5 minutes (default), or 15 minutes. I’ll leave it on 5 minutes.

8. On the Configure Additional Recovery Points screen, leave this set on Maintain Only the Latest Recovery Point and click Next.

   If you’re concerned about data corruption with the data on the drive, you can set the replication to save additional recovery points, every hour. If your system is ever hit by ransomware or some other malicious activity or entity, this will give you the ability to restore to a good recovery point, rather than the potentially damaged data that was replicated over.

9. On the Choose Initial Replication Method screen, choose Send Initial Copy over the Network and Start Replication Immediately, as shown in Figure 5-4.

   You can start immediately, or you can schedule replication. If it’s a large system, you can export the initial copy and then import on the replica.

10. On the summary page, confirm that your settings look correct and then click Finish.

At this point, replication is enabled, and the VM is being copied over to the replica server. You should get a message similar to Figure 5-5 if your replication was successful. This tells you that you need to connect the network adapters for the VM.

Setting up live migration

Live migration must be set up on any Hyper-V host that will be using it. The setup itself is pretty simple, and it can be used right away with CredSSP or after some additional configuration with Kerberos. (The additional configuration is covered in the “Kerberos” section.)

Follow these steps to configure your first Hyper-V host to support live migration. Be sure to do this on all your hosts or it won’t work!

1. From Hyper-V Manager, right-click the Hyper-V host and choose Hyper-V Settings.

2. Click Live Migrations and select the check box next to Enable Incoming and Outgoing Live Migrations.

   Simultaneous live migrations defaults to 2. Unless you have a reason to change it, it can be left as is.

3. Under Incoming Live Migrations, leave Use Any Available Network for Live Migration selected and click OK.

Kerberos

Using Kerberos to support live migration is preferred in enterprise environments because you don’t have to sign in to a server before you move it. If your organization wants to automate things, this is the way to go.

The only downside to using Kerberos for authentication in live migrations is that it does take a little more time to set it up properly than CredSSP does. You must configure what is referred to as constrained delegation to allow live migration to work with Kerberos. This is essentially giving the systems permissions to work with one another directly, and it’s done in Active Directory.

To set up constrained delegation for Kerberos, you need a system that has the Active Directory Users and Computers RSAT installed. Follow these steps:

1. From Server Manager, choose Tools⇒  Active Directory Users and Computers.
2. Double-click the Computers folder.
3. Right-click the Hyper-V host that is going to be the source server, and choose Properties.
4. Click the Delegation tab and select Trust This Computer for Delegation to Specified Services Only and select Use Any Authentication Protocol.
5. Click Add, and then click Users or Computers.
6. Type the name of the destination server and then click OK.
7. Under Available Services, select the following (hold down Ctrl to select them both):
   • cifs: This allows you to move the VM storage.
   • Microsoft Virtual System Migration Service: This allows you to move VMs.

8. Click OK.

   Your screen should look similar to Figure 5-6.

9. Click OK again to save the changes.
10. Repeat steps 3 through 9 for any other Hyper-V hosts that will participate in live migration.

After this is complete, you can kick off a live migration without having to log in to the VM.

Kicking off a live migration

Now that you have Kerberos configured and live migration configured, I’m sure you want to test it to verify that it’s working properly. Follow these steps:

1. On the source Hyper-V host, open Hyper-V Manager.
2. Right-click the VM you want to migrate and choose Move.
3. On the Before You Begin screen, click Next.
4. Select Move the Virtual Machine, and click Next.
5. On the Specify Destination Computer screen, type the name of the destination Hyper-V host, and click Next.

6. On the Choose Move Options screen, keep the default Move the Virtual Machine’s Data to a Single Location and click Next.

   You have a few options when moving your VM:

   • Move Your Virtual Machine’s Data to a Single Location: Moves the VM and its hard disks to the same location on the destination host.
   • Move the Virtual Machine’s Data by Selecting Where to Move the Items: Allows you to select different locations for the VM and for its disks.
   • Move Only the Virtual Machine: Moves the VM but not its hard disks.
7. On the Choose a New Location for Virtual Machine screen, set the location on the destination server where you want the VM’s files to be stored, and click Next.
8. On the Completing Move Wizard screen, validate that the settings look correct, and then click Finish.

When the migration is complete, the VM will show up on your other Hyper-V host. In Figure 5-7, you can see VM1 running on SERVER2022-HV2, which is my second Hyper-V host. I did the live migration from SERVER2022-HV1.

Installing Failover Clustering

Failover Clustering is a feature that is available for installation in Windows Server 2022. Installing it is similar to installing other features. Follow these steps:

1. From Server Manager, choose Manage⇒  Add Roles and Features.
2. On the Before You Begin screen, click Next.
3. On the Select Installation Type screen, click Next.
4. On the Select Destination Server screen, click Next.
5. On the Select Server Roles screen, click Next.
6. On the Select Features screen, select Failover Clustering.
7. Click Add Features, and then click Next.
8. On the Confirm Installation Selections screen, click Install.
9. When you get the message that installation succeeded, click Close.

Repeat these steps on the other members of the failover cluster before continuing on to the next step.

Configuring Failover Clustering

After the Failover Clustering feature is installed, you can actually create the cluster. First, you’ll run the validation, which will let you know if there are issues that will prevent the cluster from provisioning properly; then you’ll build the cluster.

1. From Server Manager, choose Tools⇒  Failover Cluster Manager.
2. Click Validate Configuration.
3. On the Before You Begin screen, click Next.
4. Enter the names of the servers in the failover cluster, and then click Next.
5. Accept the default Run All Tests, and click Next.

6. On the Confirmation screen, click Next.

   The test will begin running, and you’ll see something similar to Figure 5-8.

   Warnings won’t necessarily prevent you from creating your failover cluster, but you should address the warning items in the report before relying on your failover cluster for a production deployment.

7. When the test finishes, select the check box next to Create the Cluster Now Using the Validated Nodes, and then click Finish.

   The Create Cluster Wizard launches.

8. On the Before You Begin screen, click Next.

   

9. On the Access Point for Administering the cluster screen, choose a cluster name, and then click Next.
10. On the confirmation screen, click Next.
11. When the summary page launches, click Finish.
12. Click Configure Role.
13. On the Before You Begin screen, click Next.
14. On the Select Role screen, select Hyper-V Replica Broker and click Next.
15. On the Client Access Point screen, enter a name for the cluster role and click Next.
16. On the confirmation screen, click Next.
17. On the Summary page, click Finish.

Your screen should look similar to Figure 5-9 at this point if you’ve been following along.

Configuring a witness for your failover cluster

Before I jump into witness types, let’s take a step back and review the different quorum types in Windows Server Failover Clustering (see Table 5-1). Remember each node is treated as one vote.

Quorum in this sense is determined by how many systems must be operational for the cluster to start up and continue to run properly.

Now that you have an idea of what the quorum types are, let me fill you in on the types of witnesses you can use in a failover cluster. Each of these types of witnesses is able to provide a vote to make quorum in a failover cluster:

• Disk witness: A disk witness is what most system administrators are used to if they’ve worked with Failover Clustering in the past. It’s a small drive that can failover between nodes in a failover cluster.
• File share witness: A file share witness is essentially a file server that has a share configured that stores clustering information. The use case with file share witness was to have the file server with the share in a different datacenter from the other nodes in the failover cluster. If one datacenter went down, the file share witness was able to cast a deciding vote to the existing datacenter.
• Cloud Witness: Introduced in Windows Server 2016, the Cloud Witness allows you to create blob storage in Azure (hence, the reason why cloud is in the name) and use it to store clustering information. Cloud Witness was introduced as a cost-effective means of getting similar functionality to a file share witness, but without the cost of an additional file server in another datacenter.

A file share witness is relatively simple to set up, so that’s what I use for the example in this chapter. Let’s add the file share witness now. I’ve created a folder on a server that isn’t in the failover cluster, and I’ve created a share on that folder with the cluster name that I used earlier. You’ll find it created a DNS object when you went through the wizard to create the cluster. Give it read and change permissions. Now go to one of the systems that is in the failover cluster and follow these steps:

1. In the Failover Cluster Manager, select the cluster to which you want to add the file share witness.
2. In the Actions menu on the right, click More Actions and then click Configure Cluster Quorum Settings.
3. On the Before You Begin screen, click Next.
4. On the Select Quorum Configuration Option, choose Select the quorum witness and then click Next.

5. On the Select Quorum Witness screen, select Configure a File Share Witness and then click Next.

   Figure 5-10 shows some of your quorum witness options.

6. Enter the path of the file share that you’ve configured and then click Next.
7. On the Confirmation screen, click Next.
8. Click Finish.