{"id":7295,"date":"2021-12-07T03:21:22","date_gmt":"2021-12-07T03:21:22","guid":{"rendered":"https:\/\/www.insentragroup.com\/gb\/insights\/uncategorized\/azure-generation-2-vms\/"},"modified":"2022-03-30T08:26:22","modified_gmt":"2022-03-30T08:26:22","slug":"azure-generation-2-vms","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/gb\/insights\/geek-speak\/cloud-and-modern-data-center\/azure-generation-2-vms\/","title":{"rendered":"Azure Generation 2 VMs"},"content":{"rendered":"\n<p>If you have been creating Virtual Machines in Azure and avoiding using Generation 2 VMs, maybe&nbsp;it\u2019s&nbsp;time to have another look.&nbsp;<\/p>\n\n\n\n<p>For those of you who&nbsp;are not familiar with Hyper-V,&nbsp;you may be wondering what&nbsp;<a href=\"https:\/\/docs.microsoft.com\/en-us\/windows-server\/virtualization\/hyper-v\/plan\/should-i-create-a-generation-1-or-2-virtual-machine-in-hyper-v\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Generation 2<\/a>&nbsp;means&nbsp;exactly.&nbsp;Basically,&nbsp;it is&nbsp;the newer virtual machine architecture (released with Windows Server 2012&nbsp;and Windows 8)&nbsp;which&nbsp;is much more feature rich than its predecessor, Generation 1.&nbsp;Azure IaaS was&nbsp;originally built&nbsp;from&nbsp;Generation 1, so there have been some inherent limitations&nbsp;from&nbsp;there, such as lack of UEFI support.&nbsp;&nbsp;<\/p>\n\n\n\n<p>Truth be told, Azure is not a direct comparison of Hyper-V since&nbsp;Microsoft has modified how&nbsp;Azure&nbsp;works&nbsp;to better support a self-service&nbsp;public cloud.&nbsp;While&nbsp;the differences between&nbsp;Azure Generation 1 and Generation 2&nbsp;VMs&nbsp;are not quite the same as on premises Hyper-V, just consider the&nbsp;Azure&nbsp;Generation 2&nbsp;VMs&nbsp;\u201cNext Generation\u201d&nbsp;and you will be fine \ud83d\ude42&nbsp;<\/p>\n\n\n\n<p>Azure has supported Generation 2 VMs for a while now,&nbsp;however,&nbsp;throughout&nbsp;the preview and even into the GA release&nbsp;there&nbsp;were&nbsp;limitations associated with them, such as lack of support for&nbsp;VM backup, encryption&nbsp;etc.,&nbsp;which caused me to&nbsp;advise clients&nbsp;to hold off.&nbsp;&nbsp;<\/p>\n\n\n\n<p>Here we\u2019ll&nbsp;take another&nbsp;look,&nbsp;and you will see&nbsp;all&nbsp;those limitations are now gone! Generation 2 VMs support&nbsp;all&nbsp;the standard&nbsp;feature sets you would expect for&nbsp;IaaS&nbsp;VMs in Azure, such as Azure Disk Encryption, Azure Site Recovery and Azure Backup.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"380\" src=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2021\/12\/niel_hoffman_blog_12072021_img_1-1024x380.jpg\" alt=\"\" class=\"wp-image-7296\" srcset=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2021\/12\/niel_hoffman_blog_12072021_img_1-1024x380.jpg 1024w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2021\/12\/niel_hoffman_blog_12072021_img_1-300x111.jpg 300w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2021\/12\/niel_hoffman_blog_12072021_img_1-768x285.jpg 768w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2021\/12\/niel_hoffman_blog_12072021_img_1.jpg 1189w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Generation 2&nbsp;now&nbsp;supports&nbsp;all&nbsp;of&nbsp;the same features&nbsp;as Generation 1&nbsp;and&nbsp;they even support&nbsp;gigantic OS disks, which&nbsp;hardly anyone would even care about. So,&nbsp;why&nbsp;should you&nbsp;consider Generation 2 VMs&nbsp;in Azure?&nbsp;&nbsp;<\/p>\n\n\n\n<p>Here are some&nbsp;of the&nbsp;improved&nbsp;features of Generation 2 VMs:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Increased memory&nbsp;<\/li><li><a href=\"https:\/\/software.intel.com\/content\/www\/us\/en\/develop\/topics\/software-guard-extensions.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Intel Software Guard Extensions<\/a>&nbsp;(Intel SGX)&nbsp;to support confidential computing&nbsp;<\/li><li>Virtualized persistent memory (vPMEM)&nbsp;for extremely fast storage&nbsp;options&nbsp;<\/li><li>UEFI boot architecture&nbsp;rather than BIOS boot architecture&nbsp;for more secure boot options&nbsp;<\/li><li><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/virtual-machines\/trusted-launch-portal\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Azure Trusted Launch<\/a>&nbsp;currently in preview,&nbsp;which&nbsp;provides&nbsp;the following out of the gate:&nbsp;<ul><li>Secure Boot&nbsp;<\/li><li>Virtual Trusted Platform Module (vTPM)&nbsp;<\/li><li>Virtualization-based security (VBS)&nbsp;<\/li><\/ul><\/li><\/ul>\n\n\n\n<p>While some of these options may not apply to all your workloads currently, it would be beneficial to position yourself&nbsp;in a way where you can&nbsp;leverage them when the time comes. I can tell you from firsthand experience, once something becomes the new-er\/modern way of doing things in Azure,&nbsp;it\u2019s&nbsp;only a matter of time until it becomes the de facto way of doing things!&nbsp;Case in point, for all you Azure pioneers (pre-2015), remember the&nbsp;\u201cnew\u201d thing called Azure Resource Manager\u2026 need I say more?&nbsp;<\/p>\n\n\n\n<p>Another thing to consider is unlike some&nbsp;tools&nbsp;which&nbsp;you can just plan to implement later, the generation of the VM cannot be changed after the VM is created. A good example of this would be moving from Availability Sets to Availability Zones, which can be managed with a quick re-provisioning of a VM. If you build the VM as a Generation 1, it will always be a Generation 1&nbsp;&#8211; as of this writing anyway.&nbsp;<\/p>\n\n\n\n<p>Want more reasons to consider provisioning Generation 2 VMs now? How about:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>There is no cost difference from Generation 1<\/li><li>Generation 2 VMs are available in all regions<\/li><li>There are no issues with coexistence of Generation 1 and Generation 2 VMs in your environment<\/li><\/ul>\n\n\n\n<p>Here are the OS images which are supported for Generation 2 VMs from the Azure Marketplace:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Windows Server 2019, 2016, 2012 R2, 2012<\/li><li>Windows 10 Pro, Windows 10 Enterprise<\/li><li>SUSE Linux Enterprise Server 15 SP1<\/li><li>SUSE Linux Enterprise Server 12 SP4<\/li><li>Ubuntu Server 16.04, 18.04, 19.04, 19.10<\/li><li>RHEL 8.1, 8.0, 7.7, 7.6, 7.5, 7.4, 7.0<\/li><li>Cent OS 8.1, 8.0, 7.7, 7.6, 7.5, 7.4<\/li><li>Oracle Linux 7.7, 7.7-CI<\/li><\/ul>\n\n\n\n<p>To summarize, there is no downside to going with Generation 2 VMs in Azure now. You will be futureproofing yourself since Generation 2 already supports several security and performance related features, with more to come. I would recommend using Generation 2 for all new deployments if possible and plan for the eventual replacement of Generation 1 VMs over time as the requirements change for your workloads. You do not want to be left behind! I recently wrote a series on business continuity and protection from cyber attacks in Azure which you may want to read next, <a href=\"https:\/\/www.insentragroup.com\/gb\/insights\/geek-speak\/secure-workplace\/business-continuity-and-protection-from-malicious-attacks-in-microsoft-azure-part-1\/\" target=\"_blank\" rel=\"noreferrer noopener\">click here to head to part 1<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you have been creating Virtual Machines in Azure and avoiding using Generation 2 VMs, maybe\u00a0it\u2019s\u00a0time to have another look.<\/p>\n","protected":false},"author":91,"featured_media":7298,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[21],"tags":[76,79,170,171,59,172,173,174],"class_list":["post-7295","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-and-modern-data-center","tag-azure","tag-cloud","tag-hyper-v","tag-iaas","tag-microsoft","tag-recovery-and-backup","tag-windows-8","tag-windows-server","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/posts\/7295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/users\/91"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/comments?post=7295"}],"version-history":[{"count":3,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/posts\/7295\/revisions"}],"predecessor-version":[{"id":8932,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/posts\/7295\/revisions\/8932"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/media\/7298"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/media?parent=7295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/categories?post=7295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/tags?post=7295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}