directly relevant azure services cross cutting concerns identity and access connectivity (optional)...

25

Upload: blake-randall

Post on 13-Jan-2016

224 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven
Page 2: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Mario SzpusztaPrincipal Program ManagerOptions for building Hybrid Cloud Solutions with Microsoft Azure as a Platform

Designing and ImplementingHybrid Cloud Solutions for Architects(with Microsoft Azure)

3-632Important Disclaimer:

This session is not about Azure Pack, System Center and IaaS. Most of the content is related to Microsoft Azure Platform-as-a-Service.The target audience are solution architects and development leads.Code examples (C#) are part of it to demonstrate scenarios based on real-world projects.

Page 3: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

What?Hybrid Cloud outlined

Page 4: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Hybrid Cloud outlined

Page 5: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Service orientedMessaging orientedData-drivenInfrastructure-basedTechnology-specific approaches

General approaches

Page 6: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Hybrid and Microsoft Azure technologies

Things are not always a nail and not every tool is a hammer... Pick the right choice for your challenge!

Directly relevantazure services

Cross cutting concernsIdentity and

access

Connectivity

(optional)

Operations(optional)

Infrastructure-driven

Virtual networkSite-2-site VPNPoint-2-site VPNVM endpoint acls

Windows Azure Active Directory

and Access Control

Azure express route

AzureService

Management and monitoring

APIS

System Center, any 3rd-party

tools

Data-driven

Azure SQL linked serversSQL always-on(Azure SQL data sync)Storsimple appliance

Service oriented Service bus relay

Messaging oriented

Service bus queues and AMQPService bus topics(Azure queues)

Service usage-driven Any Azure-Service, e.g. HDInsight, scheduler etc.

Technology-specific

Microsoft HPC PackCassandra multi-dc setupMongodb multi-dc setup...

Any technology-specific approach offered by the platform of choice

Page 7: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Your IT can benefit from public cloudPay-per-use, scalability, elasticity

You cannot move all to a public cloudExisting investments, legal constraints etc.

Hybrid = best of bothRun in public cloud and your own data center

Why Hybrid Cloud?

Don‘t limit yourself just because of one piece not being

a fit for a public cloud!

Page 8: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Why and How?Microsoft Azure and Hybrid Cloud

Page 9: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Service-Oriented Hybrid CloudAzure Service Bus Relay

Page 10: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Messaging-Oriented Hybrid CloudAzure Service Bus Topics, Queues

Page 11: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

AdvantagesAllows for custom connectivity semanticsNo infrastructure config. Requirementse.g., Firewall port openings, NAT, proxies

DisadvantagesCustom development effort requiredRelay – Latency, availability of your DCRelay – tight coupling between servicesMessaging – more complex (async. nature)

Service & Messaging Driven Hybrid Cloud

Page 12: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Data-Driven Hybrid CloudAzure SQL Data Sync & SQL Linked Servers

Page 13: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Advantages:Not much development effort requiredEasy to setup and get running

Disadvantages:Limits on additional semantics & logicData-Sync – Limits on data types, schedulesData-Sync – Still in PreviewLinked Servers – one direction (to Azure)Linked Servers – Latency for fan-out queries

Data-Driven Hybrid Cloud

Page 14: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Infrastructure-Based Hybrid CloudAzure VNET, Site-2-Site VPN, Point-2-Site VPN

Page 15: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Advantages:No development effort requiredEasy to setup and get running

Disadvantages:No additional semantics and extensionsLatency through VPN!?Today: only single VPN connection/VNETLimits on additional semantics and logic

Infrastructure-Driven Hybrid Cloud

Page 16: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Identity managementAuthentication and SSOConnectivityUnified operations management

Always a Topic: Cross cutting concerns…

Page 17: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Azure Active DirectoryUser/organization/application managementYour directory in the cloud

Synchronization with on-premises possibleSimple: using same identities across premisesAdvanced: single-sign-on across On-Premise and Cloud

Some neat side-effectsApplications get user management “for free”Windows Azure AD can bridge towards “open authentication standards”

Identity & Authentication

Page 18: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Two types of connectivityThrough exchange provider facilitiesVia network service providers

Supported providersEquinix, Level 3AT&T, Level3 MPLS VPN

Today – U.S. onlyWashington D.C.Silicon Valley

Improving connectivity with ExpressRoute

Page 19: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Azure Service Management and monitoring API

Enables integrating Azure monitoring data into ANY monitoring solution

Microsoft’s solution: System Center 2012 R2Ops Manager and App Controller and Orchestrator

Azure management packs (Azure core, SQL DB)Azure integration pack for orchestrator

Unified VM provisioning and operations acrossMicrosoft Azure/public cloudOn-Premise/private cloud (Hyper-V + VMWare)3rd-party hosters (especially with Azure Pack)

Operations management and Hybrid Cloud

Page 20: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

SummaryQandA, Resources

Page 21: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Hybrid CloudBest of Public and Private CloudDon’t limit yourself by one bit not a fit for public clouds!

Different approachesInfrastructure-driven: VNET, VPNData-driven: SQL Sync, Linked ServersService-driven: Service Bus RelayMessaging-driven: Service Bus Queues/AMQP/Topics

Cross-Cutting ConcernsIdentity and access: Windows Azure ADConnectivity: ExpressRouteOperations: Service Management API, System Center

In Summary...

Page 22: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

What we built as part of our demos…

Page 23: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Azure Virtual Network and VPNhttp://www.windowsazure.com/en-us/documentation/services/virtual-network/ http://msdn.microsoft.com/en-us/library/windowsazure/jj156007.aspx http://msdn.microsoft.com/en-us/library/windowsazure/jj156075.aspx (!!)

Azure Service Bushttp://www.windowsazure.com/en-us/documentation/articles/service-bus-dotnet-how-to-use-relay/ http://www.windowsazure.com/en-us/documentation/articles/service-bus-dotnet-how-to-use-queues/http://www.windowsazure.com/en-us/documentation/articles/service-bus-dotnet-how-to-use-topics-subscriptions/ http://www.windowsazure.com/en-us/documentation/articles/service-bus-dotnet-advanced-message-queuing/ http://msdn.microsoft.com/en-us/library/windowsazure/hh532261.aspx (!!)

Azure Active Directoryhttp://www.windowsazure.com/en-us/services/active-directory/ http://technet.microsoft.com/en-us/library/jj573653.aspx http://msdn.microsoft.com/en-us/library/windowsazure/dn151121.aspx http://msdn.microsoft.com/en-us/library/windowsazure/dn532272.aspx

ExpressRoutehttp://www.windowsazure.com/en-us/services/expressroute/ http://msdn.microsoft.com/en-us/library/windowsazure/dn606309.aspx

System Center 2012 R2http://www.microsoft.com/en-us/download/details.aspx?id=38414 http://technet.microsoft.com/en-us/library/gg276383.aspx http://technet.microsoft.com/de-de/library/jj721956.aspx http://blogs.technet.com/b/server-cloud/archive/2011/12/01/managing-and-monitoring-windows-azure-applications-with-system-center-2012.aspx http://blogs.technet.com/b/configmgrteam/archive/2013/10/23/configmgr-and-endpoint-protection-support-for-windows-azure-vms.aspx

My bloghttp://blog.mszcool.com

Hybrid Cloud on Technethttp://blogs.technet.com/b/in_the_cloud/archive/tags/hybrid+cloud/default.aspx

Resources

Page 24: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

Your Feedback is Important

Fill out an evaluation of this session and help shape future events.

Scan the QR code to evaluate this session on your mobile device.

You’ll also be entered into a daily prize drawing!

Page 25: Directly relevant azure services Cross cutting concerns Identity and access Connectivity (optional) Operations (optional) Infrastructure-driven

© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.