梳理一下 Windows 的 Hyper-V、Hypervisor

Windows 10 里面的虚拟机相关的组件一大堆，又是 Hyper-V，又是 Hypervisor；又有什么Hyper-V Platform、Hypervisor Platform、Vmware Platform。我参考了一些文章 [1][2][3]，简单梳理一下：英文名称中文名称说明...

https://zhuanlan.zhihu.com/p/381969738

GPU Virtualization

Windows Sandbox architecture - Windows security

Windows Sandbox benefits from new container technology in Windows to achieve a combination of security, density, and performance that isn't available in traditional VMs. Rather than requiring a separate copy of Windows to boot the sandbox, Dynamic Base Image technology leverages the copy of Windows already installed on the host.

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-architecture

Add GPU to VM

• 查找gpu_path:
eg: \\?\PCI#VEN_10DE&DEV_1B81&SUBSYS_36FC1458&REV_A1#4&c55b2a1&0&0008#{064092b3-625e-43bf-9eb5-dc845897dd59}\GPUPARAV
 
如果有多个GPU，配合设备管理器进行查找



Tips: 一般intel核显的硬件id中包含8086，可以方便排除

• vm就是虚拟机的名称

• 有关GPU的进阶参数设置
Set-VMGpuPartitionAdapter (Hyper-V)
Assigns a partition of a GPU to a virtual machine.

https://learn.microsoft.com/en-us/powershell/module/hyper-v/set-vmgpupartitionadapter?view=windowsserver2022-ps

• 有关MMIO的设置：
• Some devices, especially GPUs, require additional MMIO space to be allocated to the VM for the memory of that device to be accessible.
• By default, each VM starts off with 128MB of low MMIO space and 512MB of high MMIO space allocated to it. 默认太小了所以我们需要额外设置，1-32G足够满足大部分显卡要求。
Plan for deploying devices using Discrete Device Assignment
Applies to: Windows Server 2022, Microsoft Hyper-V Server 2016, Windows Server 2016, Microsoft Hyper-V Server 2019, Windows Server 2019 Discrete Device Assignment allows physical PCIe hardware to be directly accessible from within a virtual machine.

https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/plan/plan-for-deploying-devices-using-discrete-device-assignment#mmio-space

上述文档也提供了如何具体确定当前GPU所需要的MMIO大小的脚本SurveyDDA.ps1

Copy GPU driver to VM

Streaming

默认会包括以下几个虚拟显示器(Virtual Display)

• Hyper-v video: VM默认自带的VD

• Remote Display Adapter: 使用增强会话功能时创建的VD, 可以比较方便更改分辨率. 走RDP协议

• USB Mobile Monitor: 安装如下虚拟桌面后的VD

• 虚拟声卡: VB-Cable

• 虚拟桌面:
• 因为原始的Hyper-v video功能比较少, 分辨率固定为1024x768 (虽然可以使用第三方软件修改). 所以推荐使用第三方的虚拟桌面
• https://www.amyuni.com/downloads/usbmmidd_v2.zip
• 需要写一个脚本来开机创建一个VD
• 开机脚本可以在创建后, 使用win下的“任务计划程序”设置为开机以管理员身份运行

Moonlight

Usage - Sunshine documentation

See the setup section for your specific OS. If you did not install the service, then start sunshine with the following command, unless a start command is listed in the specified package installation instructions. Note A service is a process that runs in the background. Running multiple instances of Sunshine is not advised.

https://docs.lizardbyte.dev/projects/sunshine/en/latest/about/usage.html

• TCP 47984, 47989, 48010

• UDP 47998, 47999, 48000, 48002, 48010

Network

• 专用(Private): 仅允许虚拟机之间互联, 不能访问宿主机

• 内部(Internal): 允许虚拟机和宿主机互联, 使用一个独立网段
• Note: 自己创建的该类虚拟交换机默认不包含DHCP服务, 需要自己对每台虚拟机和host对应虚拟网卡设备设置ip等信息;
• 此外自己创建的该类虚拟交换机默认也不开启NAT功能, 因此虚拟机无法通过设置该网络而访问外部网络.

• 外部(External): 将虚拟机看作局域网中一个独立的设备, 由宿主机外的路由器进行管理

• Internal类型, 外加DHCP和NAT.

• 默认使用/20 网段, eg:

Port Forwarding

1. Make a new Hyper-V Internal Switch(这一步也可以在Hyper-V的GUI中完成)

2. Set up a new IP address/subnet(eg: 192.168.14.0/24) for the Hyper-V host on the new adapter
• Note: 这里是通过接口名称-InterfaceAlias来确定对应adapter (对应名称为vEthernet (xxx))
• 也可以通过-InterfaceIndex来指定.
• 二者都可以通过命令Get-NetAdapter进行查看

3. Set up a NAT Network on the new subnet
New-NetNat (NetNat)
Creates a NAT object. New-NetNat [-Name] [-ExternalIPInterfaceAddressPrefix ] [-InternalRoutingDomainId ] [-InternalIPInterfaceAddressPrefix ] [-CimSession ] [-ThrottleLimit ] [-AsJob] [-WhatIf] [-Confirm] [ ] The New-NetNat cmdlet creates a Network Address Translation (NAT) object that translates an internal network address to an external network address. NAT modifies IP address and port information in packet headers.

https://learn.microsoft.com/en-us/powershell/module/netnat/new-netnat

4. 在VM上添加该switch, 并手动设置ip (因为不包含DHCP)

5. Set up a port-forward on the NAT Network to the VM (e.g. TCP 1443 -> 192.168.14.100:443)
Add-NetNatStaticMapping (NetNat)
Add-NetNatStaticMapping [-NatName] -Protocol [-RemoteExternalIPAddressPrefix ] -ExternalIPAddress -ExternalPort -InternalIPAddress [-InternalPort ] [-InternalRoutingDomainId ] [-CimSession ] [-ThrottleLimit ] [-AsJob] [-WhatIf] [-Confirm] [ ] The Add-NetNatStaticMapping cmdlet adds a static mapping to a network address translation (NAT) instance. A static mapping enables an incoming connection from an external network to access a host on an internal network through the NAT.

https://learn.microsoft.com/en-us/powershell/module/netnat/add-netnatstaticmapping

Tips: 对同一个端口的TDP和UDP需要单独指定

Enhanced Session

Use local resources on Hyper-V virtual machine with VMConnect

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows 11, Windows 10, Windows 8.1 Virtual Machine Connection (VMConnect) lets you use a computer's local resources in a virtual machine, like a removable USB flash drive or a printer. Enhanced session mode also lets you resize the VMConnect window.

https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/learn-more/use-local-resources-on-hyper-v-virtual-machine-with-vmconnect