Taking a Deep Dive into Microsoft Azure IaaS Capabilities

advertisement
Up to 32 TB of storage per VM
5k
Disk
IOPS,
Provisioning
200MB/s 5k
Disk
IOPS,
Provisioning
200MB/s
64,000 IOPS per VM
50,000 IOPS per disk
SSD
4k IOPS,
Provisioning
32MB/s
~5 ms read/write (no cache)
less than 1ms read latency (cache)
VM/Network
3,200 IOPS,Provisioning
32MB/s
Premium Storage
Blobs
Server
SSD
•
•
•
•
•
•
Visual Studio debuggers
Diagnostics agents
Monitoring agents
Access recovery
Docker extension
Backup helper
RESOURCE GROUP
SQL-A
Website
Azure Templates can:
Instantiation of repeatable config.
Configuration  Resource Group
[SQL CONFIG] VM (2x)
• Ensure Idempotency
• Simplify Orchestration
• Simplify Roll-back
• Provide Cross-Resource Configuration
and Update Support
DEPENDS ON SQL
DEPENDS ON SQL
Azure Templates are:
• Source file, checked-in
• Specifies resources and dependencies
(VMs, WebSites, DBs) and
connections (config, LB sets)
SQL - A
Website
• Parametized input/output
SQL CONFIG
Virtual
Machines
 Massive and parallel deployment of
Virtual Machines
 3 Fault Domains in Availability Sets
 Custom URLs for Custom Script VM
Extensions for VMs
 SSH-2 RSA Format Support for
SSH keys for Linux VMs
 Increased Security over
Keys
 Applications get no direct
access to Keys
 Level 2 Certified HSMs
Upgrade
• complexity made simple
• master template can be used to rollout upgrades
• imperative APIs, client tools support to update resources
Manageability, Auditing
• operations can be tracked upto 90 days
• management Locks to lock down resources from deletion
 Wide range of Quickstart Templates



Indexed on Azure.com
Github Repo
Community & Microsoft contributed
 Integration of IaaS with Azure Services



What is RBAC
 allows secure access with granular permissions to
resources
Role Definitions
• describes the set of permissions (e.g. read actions)
• can be used in multiple assignments
 assignable to users, groups or service principals
 built-in roles make it easy to get started
Role Assignments
• associate role definitions with an identity (e.g.
user/group) at a scope (e.g. resource group)
• always inherited – subscription assignments
apply to all resources
20
subscription level – grants
permissions for all
resources in the sub
resource group level –
grants permissions for all
resources in the group
resource level – grants
permissions to the specific
resource
Usage API – REST API to provide
customers and partners
programmatic access to azure
consumption data.
RateCard API – REST API to provide
customers and partners programmatic access
to all resource details and pricing for non-EA
offers.
• Hourly and Daily aggregations
• Azure 1st party and 3rd party
(Azure Marketplace) data
available
• Includes usage for all Azure
offer types
• Includes resource tags
• Resource metadata (service,
service type..) included
• Supports Azure RBAC
• Gets list of all available Azure resources
• Localized Resource metadata (service, service
type..) available
• included quantities available
• Support for graduated pricing as well as flat
rate pricing
• No support for EA offers
• Pre-tax rates
• Supports Azure RBAC
Reach out to the Azure Billing Feedback alias: azurebillingfeed@microsoft.com
Simplify Your Cost Allocation with Azure Tags and Cloud Cruiser
Division
Arch & Design
Assembly
Engineering
Materials
Production Eng.
Shipping
Partner 2: Cloudyn (booth# 4)
Keeping your cost & usage under control
Infrastructure
• Templates for different environments (eg: Dev, Test, Prod)
• orchestration of multiple infrastructure tiers (eg: VMs, VNETs)
• orchestration across multiple azure resources (eg: VMs, Websites)
In-VM Configuration
• common scripts/recipes that can be shared across multiple VMs
• app-specific scripts that will be used for application setup
jumpbox
tshirtSize
osFamily
SharePoint on Azure Virtual Machines (v2)
Admin Site, Port 2000
App
1
WFE
1
SQL
1
AD
1
Witness
WFE-LB
WFE
2
App Tier-LB
App
2
SQL
Internal LB
SQL
2
AD LB
AD
2
configDatabaseName
…
spSiteTemplateName
https://resources.azure.com
Consistent
Management
Layer
Curated
Extensions
Session Code
Title
Time
BRK3450
Microsoft Azure Marketplace: Images, Extensions, Docker and
More
Tuesday, May 5, 10:45AM
BRK2491
Getting Started with Microsoft Azure IaaS
Tuesday, May 5, 1:30PM
BRK3473
Introducing Microsoft Azure DNS
Tuesday, May 5, 1:30PM
BRK2707
Roles Based Access Control for Microsoft Azure
Tuesday, May 5, 3:15PM
BRK3124
SharePoint 2013 and Azure IaaS: Better Together
Tuesday, May 5, 3:15PM
BRK3178
Exchange on IaaS: Concerns, Tradeoffs and Best Practices
Tuesday, May 5, 3:15PM
BRK3733
Deploying Hyper Scale Application on Microsoft Azure
Wednesday, May 6, 9:00AM
BRK3705
Running Large Scale Batch and High Performance Computing
Applications with Azure Batch
Wednesday, May 6, 1:30PM
BRK3480
Java on Microsoft Azure: What’s New along with Tips, Tricks
and Tools
Wednesday, May 6, 3:15PM
BRK3725
Deploying and Running Linux and Non Microsoft Solutions
Stack on Azure
Wednesday, May 6, 3:15PM
Session Code
Title
Time
BRK4453
Deploying, Organizing and Securing Applications with the
Azure Resource Manager
Wednesday, May 6, 5:00PM
BRK3722
Managing Linux and Windows on Microsoft Azure with Chef
May 7th, 9:00AM
BRK3470
Virtual Networking and Security in Microsoft Azure
May 7th, 9:00AM
BRK3702
Running Docker Containers on Microsoft Azure
May 7th, 10:45AM
BRK4379
Azure for IaaS on Azure Pack
May 7th, 1:30PM
BRK4700
Unleashing Microsoft Azure Networking APIs
May 7th, 3:15PM
BRK1454
Hybrid Partnerships: Enabling On-Premises Scenarios in
Microsoft Azure
May 7th, 3:15PM
BRK4450
Understanding Which Workloads are Ideal for Azure Premium
Storage
May 7th, 5:00PM
BRK3452
Running Linux in Microsoft Azure
Friday, May 8th, 10:45AM
Finding all the information to learn how to extend your on-premises datacenter infrastructure to Azure can be time-consuming.
Includes cross Azure subscription and virtual network connections, as
well as connecting them to an on-premises network.
Mouse hovers expose
detailed information
about each object.
Mouse clicks on most objects open detailed design or implementation articles about them.
Save time by downloading and using the interactive diagram today from
http://aka.ms/derad.
Watch the 45 minute walkthrough video at http://aka.ms/derad-video.
NO PURCHASE NECESSARY. Open only to event attendees.
Winners must be present to win. Game ends May 9th, 2015.
For Official Rules, see The Cloud and Enterprise Lounge or
myignite.com/challenge
http://myignite.microsoft.com
Download