Präsentation im Rahmen der Windows Azure Starter Roadshow: - Virtuelle Server innert Minuten in der Cloud bereitstellen --Entwicklung/Test-Umgebung --Desaster Recovery - Umgang mit Cloud-Storage --Backup-Lösungen Windows --SQL Server - Virtual Network - Hybrid-Cloud-Szenarien

1. 2013 © Trivadis
BASEL BERN LAUSANNE ZÜRICH DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. HAMBURG MÜNCHEN STUTTGART WIEN
Microsoft Azure IaaS
Networking
Storage
Stefan Geiger
Gerry Keune
@trivadis.com
12.06.2014
Iaas, Networking, Storage
1

2. 2013 © Trivadis
Agenda
1. Virtual Machines
2. Networking
3. Storage
12.06.2014
Iaas, Networking, Storage
2

3. 2013 © Trivadis
Microsoft Azure Virtual Machines
 Creation and use of virtual machines in the Cloud (truly IaaS)
 Windows Server, Linux
 Persistent VM roles
 Bring your own or use Microsoft provided
- You update and maintain them !!!
 Possible to host:
 Active Directory, SharePoint, SQL Server and more…
 99.95% SLA on single-instance
 Connect to on-premise using
 Microsoft Azure Virtual Network
05.06.2014
Iaas, Networking, Storage
3

4. 2013 © Trivadis
Virtual Machines Sizes
05.06.2014
Iaas, Networking, Storage
4
VM Size CPU Cores Memory Bandwidth
# Data
Disks
Extra Small Shared 768 MB 5 (Mbps) 1
Small 1 1.75 GB 100 (Mbps) 2
Medium 2 3.5 GB 200 (Mbps) 4
Large 4 7 GB 400 (Mbps) 8
Extra Large 8 14 GB 800 (Mbps) 16
A6 4 28 GB 400 (Mbps) 8
A7 8 56 GB 800 (Mbps) 16

5. 2013 © Trivadis
VM
Microsoft Azure Virtual Machines
05.06.2014
Iaas, Networking, Storage
5
VHD
(Gallery)
VHD
(User)
VM VM
Virtual Machine Management
(Portal / REST API)
RDP/SSH

6. 2013 © Trivadis
VM
Grouping VM‘s
05.06.2014
Iaas, Networking, Storage
6
VM
VM
VM
VM
VM
VM’s in Cloud Service
VIP
VIP
VIP

7. 2013 © Trivadis
Load Balancing (VM’s in Cloud Service)
05.06.2014
Iaas, Networking, Storage
7
VM
VM
VM
VM’s in Cloud Service
VIP
Azure
LB
Port 80
Port 80
Port 80
Port 80

8. 2013 © Trivadis
Virtual Machines Scenarios
 Enterprise Application running in the Cloud
 Test Environment and Development
 Fast and cheap way to emulate
 Private / Hybrid Cloud
 Disaster Recovery
05.06.2014
Iaas, Networking, Storage
8

9. 2013 © Trivadis
05.06.2014
Iaas, Networking, Storage
9
Demo
Virtual Machines

10. 2013 © Trivadis
Agenda
1. Virtual Machines
2. Networking
3. Storage
12.06.2014
Iaas, Networking, Storage
10

11. 2013 © Trivadis
Overview
05.06.2014
Iaas, Networking, Storage
11
Application-Layer
Connectivity &
Messaging
Service Bus / Hybrid Connection
Data Synchronization
SQL Data Sync
Secure Site-to-Point
Connectivity
Virtual Network
Secure Site-to-Site
Network Connectivity
Virtual Network
IP-level connectivity

12. 2013 © Trivadis
Virtual Network
 Hybrid and Private Cloud scenarios
 Connect On-Premise and Cloud applications
 A private space dedicated to your company
 Virtual network uses IPsec to secure the connection between your
datacenter, through its VPN gateway and Microsoft Azure
 Full control of the network topology
 configure IP addresses
 Upon creation of VM’s they can immediately be added to configured
subnets
05.06.2014
Iaas, Networking, Storage
12

13. 2013 © Trivadis
Virtual Network
 Virtual Machines deployed into
a virtual network have
an infinite DHCP lease
05.06.2014
Iaas, Networking, Storage
13
VM1 VM2
(Role)

14. 2013 © Trivadis
Virtual Network VPN Device List
 Generic VPN devices must support
 IKE v1
 AES 128, 256
 SHA1, SHA2
05.06.2014
Iaas, Networking, Storage
14
Platform OS Family Examples
ASA 5500 Series (Adaptive
Security Appliances)
ASA Software
8.4+
5505, 5550
ASR 1000 Series
Aggregation Services
Routers
IOS XE 2.1+ 1002
ISR Series Integrated
Services Routers
IOS 12.2+ 2801, 2901,
2911
Platform OS Family Examples
SRX Series Routers JunOS 10.2+ 210, 650
J Series Routers JunOS 9.4+ 4350
ISG Series Routers ScreenOS 6.2+ SX2
SSG Series Routers ScreenOS 6.2+ 550

15. 2013 © Trivadis
Point to Site Connectivity
 Provides network-level bridge between cloud and on-premises
environments
 Enables cross-premises connectivity
 Simple setup and management
- No VPN device or network configuration required
05.06.2014
Iaas, Networking, Storage
15

16. 2013 © Trivadis
05.06.2014
Iaas, Networking, Storage
16
Demo
Point to Site Connectivity

17. 2013 © Trivadis
Agenda
1. Virtual Machines
2. Networking
3. Storage
12.06.2014
Iaas, Networking, Storage
17

18. 2013 © Trivadis
Azure Storage
 High Accessibility and Scalability
 Geo-location and replication support
 Data is automatically partitioned and load balanced across servers
 200 TB Data per account
 Can CDN Enable Account
 Blobs delivered via 24 global CDN nodes
 Can co-locate storage account with compute account
 Explicitly or using affinity groups
 Storage Libraries in Many Languages
 C#/.NET, Python, Perl, JavaScript, PHP and more…
 REST/API
12.06.2014
Iaas, Networking, Storage
18

19. 2013 © Trivadis
Azure Storage Abstractions
12.06.2014
Iaas, Networking, Storage
19

20. 2013 © Trivadis
Storage Security
 Iaas, Networking, Storage provides simple security for calls to storage
service
 HTTPS endpoint
 Digitally sign requests for privileged operations
 Accounts protected by two independent 512 bit shared secret keys
 Can be regenerated independently
 More granular security via Shared Access Signatures
 Ad-hoc
 Policy based
 Data Encryption must be managed by yourself !!!
12.06.2014
Iaas, Networking, Storage
20

21. 2013 © Trivadis
Microsoft Azure Blob Storage
Iaas, Networking, Storage
21
Account
roadshow
Container Blob Pages/
Blocks
images
videos
PIC01.jpg
PIC02.jpg
VID1.AVI
Block/Page
1
Block/Page
2
http://<account>.blob.core.windows.net/<container>/<blobname>
12.06.2014

22. 2013 © Trivadis
05.06.2014
Iaas, Networking, Storage
22
Demo
Storage Account

23. 2013 © Trivadis
BASEL BERN LAUSANNE ZÜRICH DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. HAMBURG MÜNCHEN STUTTGART WIEN
Thank You Q & A
12.06.2014
Iaas, Networking, Storage
23