Looking for information about older versions of Windows Server? Check out our other Windows Server libraries on You can also search this site for specific information.

Networking is a foundational part of the Software Defined Datacenter (SDDC) platform, and Windows Server 2016 provides new and improved Software Defined Networking (SDN) technologies to help you move to a fully realized SDDC solution for your organization.

When you manage networks as a software defined resource, you can describe an application's infrastructure requirements one time, and then choose where the application runs - on premises or in the cloud.

This consistency means that your applications are now easier to scale, and you can seamlessly run applications - anywhere - with equal confidence about security, performance, quality of service, and availability.

Software Defined Networking

  • Software Defined Networking (SDN)

    You can use this topic to learn about the SDN technologies that are provided in Windows Server, System Center, and Microsoft Azure.

    Note: For Hyper-V hosts and virtual machines (VMs) that run SDN infrastructure servers, such as Network Controller and Software Load Balancing nodes, you must install Windows Server Datacenter edition. For Hyper-V hosts that contain only tenant workload VMs that are connected to SDN-controlled networks, you can run Windows Server Standard edition.

  • Deploy a Software Defined Network infrastructure using scripts

    This guide provides instructions on how to deploy Network Controller with virtual networks and gateways in a test lab environment.

  • Network Controller

    Network Controller provides a centralized, programmable point of automation to manage, configure, monitor, and troubleshoot virtual and physical network infrastructure in your datacenter.

  • Software Load Balancing (SLB) for SDN

    Cloud Service Providers (CSPs) and Enterprises that are deploying Software Defined Networking (SDN) in Windows Server 2016 can use Software Load Balancing (SLB) to evenly distribute tenant and tenant customer network traffic among virtual network resources. The Windows Server SLB enables multiple servers to host the same workload, providing high availability and scalability.

  • RAS Gateway for SDN

    RAS Gateway, which is a software-based, multitenant, Border Gateway Protocol (BGP) capable router in Windows Server 2016, is designed for Cloud Service Providers (CSPs) and Enterprises that host multiple tenant virtual networks using Hyper-V Network Virtualization.

  • Network Function Virtualization

    In software defined datacenters, network functions that are being performed by hardware appliances (such as load balancers, firewalls, routers, switches, and so on) are increasingly being virtualized as virtual appliances. This "network function virtualization" is a natural progression of server virtualization and network virtualization.

  • Datacenter Firewall Overview

    Datacenter Firewall is a network layer, 5-tuple (protocol, source and destination port numbers, source and destination IP addresses), stateful, multitenant firewall.

Networking Technologies

  • BranchCache

    BranchCache is a wide area network (WAN) bandwidth optimization technology. To optimize WAN bandwidth when users access content on remote servers, BranchCache fetches content from your main office or hosted cloud content servers and caches the content at branch office locations, allowing client computers at branch offices to access the content locally rather than over the WAN.

  • Core Network Guide

    Learn how to deploy a Windows Server network with the Core Network Guide, as well as add features to your network deployment with Core Network Companion Guides.

  • DirectAccess

    DirectAccess allows connectivity for remote users to organization network resources.

  • Domain Name System (DNS)

    Domain Name System (DNS) is one of the industry-standard suite of protocols that comprise TCP/IP, and together the DNS Client and DNS Server provide computer name-to-IP address mapping name resolution services to computers and users.

  • Dynamic Host Configuration Protocol (DHCP)

    Dynamic Host Configuration Protocol (DHCP) is a client/server protocol that automatically provides an Internet Protocol (IP) host with its IP address and other related configuration information, such as the subnet mask and default gateway.

  • Hyper-V Network Virtualization

    Hyper-V Network Virtualization (HNV) enables virtualization of customer networks on top of a shared physical network infrastructure.

  • Hyper-V Virtual Switch

    The Hyper-V Virtual Switch is a software-based layer-2 Ethernet network switch that is available in Hyper-V Manager when you install the Hyper-V server role. The switch includes programmatically managed and extensible capabilities to connect virtual machines to both virtual networks and the physical network. In addition, Hyper-V Virtual Switch provides policy enforcement for security, isolation, and service levels.

  • IP Address Management (IPAM)

    IP Address Management (IPAM) is an integrated suite of tools to enable end-to-end planning, deploying, managing and monitoring of your IP address infrastructure, with a rich user experience. IPAM automatically discovers IP address infrastructure servers and Domain Name System (DNS) servers on your network and enables you to manage them from a central interface.

  • Network Load Balancing

    Network Load Balancing (NLB) distributes traffic across several servers using the TCP/IP networking protocol. For non-SDN deployments, NLB ensures that stateless applications, such as Web servers running Internet Information Services (IIS), are scalable by adding more servers as the load increases.

  • High-Performance Networking

    Network offload and optimization technologies in Windows Server 2016 include Software Only (SO) features and technologies, Software and Hardware (SH) integrated features and technologies, and Hardware Only (HO) features and technologies.

    The following offload and optimization technology documentation is also available:

    Converged Network Interface Card (NIC)
    Data Center Bridging (DCB)
    Virtual Receive Side Scaling (vRSS)

  • Network Policy Server

    Network Policy Server (NPS) allows you to create and enforce organization-wide network access policies for connection request authentication and authorization.

  • Network Shell (Netsh)

    You can use the Network Shell (netsh) networking utility to manage networking technologies in Windows Server 2016 and Windows 10.

  • Network Subsystem Performance Tuning

    This topic provides information about choosing the right network adapter for your server workload, ordering network interfaces, network related performance counters, and performance tuning network adapters and related networking technologies, such as Receive Side Scaling (RSS), Receive Side Coalescing (RSC), and others.

  • NIC Teaming

    NIC Teaming allows you to group physical Ethernet network adapters into one or more software-based virtual network adapters. These virtual network adapters provide fast performance and fault tolerance in the event of a network adapter failure.

  • Quality of Service (QoS) Policy

    You can use QoS Policy as a central point of network bandwidth management across your entire Active Directory infrastructure by creating QoS profiles, whose settings are distributed with Group Policy.

  • Windows Internet Name Service (WINS)

    Windows Internet Name Service (WINS) is a legacy computer name registration and resolution service that maps computer NetBIOS names to IP addresses. Using DNS is recommended over using WINS.

  • Remote Access

    You can use Remote Access technologies, such as DirectAccess and Virtual Private Networking (VPN) to provide remote workers with connectivity to internal network resources. In addition, you can use Remote Access for local area network (LAN) routing, and for Web Application Proxy. which provides reverse proxy functionality for web applications inside your corporate network to allow users on any device to access them from outside the corporate network.

    For more information about Web Application Proxy, which is a role service of the Remote Access server role, see Web Application Proxy in Windows Server 2016

  • Windows Container Networking

    Windows Container Networking allows you to create and manage networks for connecting container endpoints on both Windows 10 and Windows Server hosts by using standard industry tools and workflows. Windows container networks support multiple topologies, including private, flat-L2, and routed-L3.

    Also supported are overlays that you can create locally on the host by using Docker, Kubernetes, or Windows PowerShell through plugins that communicate with the Windows Host Networking Service (HNS). You can create and manage multi-node cluster networks through higher level orchestration systems by communicating through a local agent to each node's HNS.

  • Virtual Private Networking (VPN)

    DirectAccess and VPN is a role service of the Remote Accessserver role.

    When you install Remote Access as a VPN server, you can use Virtual Private Networking (VPN) to provide your remote employees with connections to your organization network across the Internet - while also maintaining information privacy with encrypted connections.

    With Windows Server Remote Access VPN - and Windows 10 client computers - you can deploy Always On VPN. Always On VPN gives you the ability to manage remote VPN clients that are always connected, while also providing convenience for remote workers, who no longer need to manually connect to and disconnect from VPN to your organization network.

    For more information, see Remote Access Always On VPN Deployment Guide for Windows Server 2016 and Windows 10

Additional Resources

Networking resources for operating systems earlier than Windows Server 2016 are available at the following locations.