Windows Storage Server NAS iSCSI

Windows Storage Server 2019 introduces an impressive range of new features in a number of areas. Below are, in no particular order, our top 8.

Persistent Memory support for Hyper-V Virtual Machines

In order to leverage the high throughput and low latency of persistent memory in VMs, it can now be projected directly into virtual machines, significantly lessening database transaction latency or reducing recovery times for low latency in-memory databases on failure.

Linux containers on Windows

With WSS 2019 you are now able to run Windows and Linux-based containers on the same container host, using the same docker daemon. This allows for you to have a heterogenous container host environment whilst still giving application developers flexibility.

Windows Defender Advanced Threat Protection (ATP)

The ATP deep platform sensors and response actions expose memory and kernel level attacks. They respond through suppressing malicious files and terminating malicious processes.

Windows Defender ATP Exploit Guard is a new set of host-intrusion prevention capabilities. The four components of Windows Defender Exploit Guard are designed to lock down the device against a large range of attacks and block behaviours often used in malware attacks, while simultaneously balancing security risk and productivity needs.

With Network protection, the endpoint is safeguarded against web-based threats via blocking any outbound process on the device and untrusted hosts/IP addresses through Windows Defender Smartscreen.

Sensitive data is protected by controlled folder access, which blocks untrusted processes from accessing your protected folders.

Windows Defender Application Control (also known as Code Integrity (CI) policy) was a feature present in Windows Server 2016. While hailed as a great concept, feedback from users had suggested it was difficult to deploy. This issue is addressed in Windows Storage Server 2019. Default CI policies have been built, which allows for Windows in-box files and Microsoft applications. It blocks known executables that can bypass CI.

Container Improvements

Improved Integrated Identity

Integrated Windows authentication in containers has been made simpler and more reliable, addressing many limitations present in previous versions of Windows Server.

Better Application Compatibility

Container Windows-based applications have become a lot easier. The app compatibility for the existing windowsservercore image has been enhanced. For applications with additional API dependencies, you now have a third base image: windows.

Reduced Size and Higher Performance

The base container image download sizes, size on disk and start-up times have all been improved, speeding up container workflows.

Management Experience Using Windows Admin Center (Preview)

It is now easier than ever before to view which containers are running on your computer and manage individual containers with a new extension for Windows Admin Center. Simply search for the “Containers” extension in the Windows Admin Center public feed.

Built-in Support for Kubernetes

Windows Server 2019 carries on the improvements to storage, computing and networking from the semi-annual channel releases required to support Kubernetes on Windows.

Container Networking in Windows Server 2019 significantly boosts the usability of Kubernetes on Windows by enhancing platform networking resiliency and support of container networking plugins.

Encrypted Networks

Virtual network encryption allows for the encryption of virtual network traffic between VMs which communicate with each other within subnets that have been marked as Encryption Enabled. Also utilised is Datagram Transport Layer Security (DTLS) on the virtual subnet to encrypt packets. DTLS protects against any tampering, forgery or eavesdropping by anyone with access to the physical network.

Failover Clustering

Cluster sets
Azure-aware clusters
Cross-domain cluster migration
USB witness
Cluster infrastructure improvements
File share witness enhancements
Cluster hardening
Failover Cluster no longer uses NTLM authentication

Low Extra Delay Background Transport

The Low Extra Delay Background Transport (LEDBAT) is a latency optimised, network congestion control provider designed to automatically yield bandwidth to users and applications, whilst consuming the entire bandwidth available when the network is not in use. This technology is meant for use in deploying large, critical updates across an IT environment without negatively impacting user facing services and associated bandwidth.