Ken CasadaTechnical EvangelistMicrosoft Switzerlandkcasada@Microsoft.com

Microsoft Azure Overview

Flexible Open Solid

Microsoft Azure

Global Footprint

Pay only for what you use

Windows Azure – Running your Apps Web

SitesWeb Apps

Data

Cloud Services

Multi-tier Apps

Service Model

Data

Infrastructure Services

(VM)

Virtual Network

Data

Applications

Firewall Rules

O/S

Focus on the Application

Mobile ServicesMobile Apps

Data

IaaS (VM & VNET) Windows Server and Linux Virtual Private Networking

Capabilities (VNET)

Does Your App Need a Virtual Network?IP Address Requirements• Virtual Machines deployed into a virtual network have an

infinite DHCP lease (not static but effectively the same thing)

• Deploy apps in the cloud that requires Active Directory

Hybrid On-Premises Cloud Apps• Requirement for connectivity between your data center

and the public cloud

Connectivity between cloud services• Connecting a PaaS to IaaS Service (for better

performance / there are apps that have dependencies on resources that require VM such as SharePoint, SQL Server, Active Directory,…)

Corpnet

Subnet 2Subnet 1

Creating a Virtual Private Network

Creating a Virtual Private Network

How does a private IP get allocated to a VM?- One of the available IP addresses is allocated as the VM is

allocated! - The IP address remains the same as long as the VM is allocated.

New:- You can statically set a private IP address to a VM (today only via

PowerShell)- How? Configure a Static Internal IP Address (DIP) for a VM

Virtual MachinesDemo

BGInfo Extension• Display useful server information to the desktop as a wallpaper

VMAccess Extension• Did you previously lost your IaaS VM password? Are the RDP settings of the VM broken?

With VMAccess you can now reset the password and the username !!!

Custom Script Extension• Allows you to specify a powershell script file to run in the VM immediately after it’s created.

http://blogs.msdn.com/b/windowsazure/archive/2014/04/24/automating-vm-customization-tasks-using-custom-script-extension.aspx

Built-In Extensions by Microsoft (Demo Summary)

• How to enable/ disable BGInfo/VMAccess extensions?• How to reset a VM password? How to fix RDP settings?...by using

the VMAccess extension…. http://

blogs.msdn.com/b/windowsazure/archive/2014/04/11/vm-agent-and-extensions-part-1.aspx

• How to add the VM Agent on existing VMs? http://

blogs.msdn.com/b/windowsazure/archive/2014/04/15/vm-agent-and-extensions-part-2.aspx

Built-In Extensions by Microsoft (Demo Summary)

• All VM within the same cloud service or VNET can automatically communicate to each other using a private network channel!

• All other inbound communication (such as traffic initiated from Internet hosts) requires an endpoint.

• Default Endpoints are created in order to remotely administer your machine

• Remote Desktop Protocol (RDP) Endpoint Windows OS• PowerShell Endpoint Windows OS• Secure Shell (SSH) Endpoint Linux OS

• Tip: it is possible to define ACL (Access Control List) at the Endpoint level (see http://msdn.microsoft.com/library/azure/dn376541.aspx)

• Deny or permit traffic to the endpoint based on remote subnet IPv4 address range

• Blacklist IP addresses, …

EndPoint (Demo Summary)

EndPointPublic Port (80)Local/Private Port (80)Protocol (TCP/UDP)Name

Load Balanced Set (Demo Summary)

Cloud Service

Public Port 80

Port 80

Port 80

Port 80

Port 80

mycloudservicednsname

Single Public IP Per Cloud Service (VIP)

http://mycloudservicednsname.cloudapp.net:80

Load Balancer Probe (default)Set NameProtocol (TCP/HTTP)Probe PortProbe Interval

Load Balancer Probes (Demo Summary)

Cloud Service

Public Port 80

Port 80

Port 80

Port 80

Port 80

TCP Probe

Load Balancer Probe (custom)Set NameProtocol (TCP/HTTP)Probe PortProbe Interval

Load Balancer Custom Probes (Demo Summary)

Cloud Service

Public Port 80

Port 80

Port 80

Port 80

Port 80

What’s new in Networking?• How does a private IP address get allocated to a VM?

- One of the available IP address is allocated as the VM is allocated- The IP address remains the same as long as the VM is allocated.

New:- You can statically set a private IP address to a VM (today only via PowerShell)- How? Configure a Static Internal IP Address (DIP) for a VM

• Public IP Reservations (http://msdn.microsoft.com/en-us/library/dn690120.aspx) - you can have static public IP addresses- up to 5 for free

• Instance-Level Public IP Addresses (http://msdn.microsoft.com/en-us/library/dn690118.aspx) - Public address that can be assigned directly to the VM (rather than to the cloud service that your VM resides within)- i.e. (Outbound traffic originating from the VM goes out with PIP as the source and this uniquely identifies the VM to external entities)

• Internal Load Balancing support between VMs that don’t have public facing endpoints(enables to load-balance VM with a private IP address)

- Accessible to VM within the same VNET or Cloud Service- How ? Internal Load balancing / Configure an internal load-balanced set

Web Sites Build with popular web framework

(ASP.NET, PHP, Java, Python or Node.js) With a SQL DB or MySQL database Deploy in seconds with

WebDeploy, FTP Source Control Deployment (ex.

Git/TFS ) Start for free, scale up as your traffic

grows

Web sitesDemo

Cloud Services (PaaS) Automated application

management Support rich multi-tier

architectures• Web Role / Worker Role

Build stateless highly scalable apps and services

Deploying a cloud service

ServicePackage

Upload to Windows Azure

StorageMicrosoft

Visual StudioWeb Role

Worker Role

Network Load Balancer

Packaging and Deployment (Paas)

Network Load Balancer

Package

Monitoring (Paas)

What is a Cloud Service?

A collection of related service roles

Web Role Worker Role

Applicationbuilding blocks

StorageBig data

Caching

CDN

Database

Identity

Media

Messaging

Networking

Traffic

DB

Azure SQL DatabaseRelational SQL Server Engine in the CloudFully Managed ServiceEnteprise-Ready with automatic support for HADesigned to scale out elastically with demand

Azure SQL Database != SQL ServerSQL Server Feature Limitations (Azure SQL Database)

CacheLow latency, in-memory distributed cache

3 Types of Cache:• Azure Redis Cache (preview)• Managed Cache Service• In-Role Cache (only for Cloud Services app)

We recommend all new developments use the Azure Redis Cache!!! Learn more here:

http://azure.microsoft.com/en-us/documentation/services/cache/#redisAzure Redis Cache (Preview)

Traffic ManagerTraffic

Windows Azure Traffic Manager• Intelligently directs requests from users across instances of an app deployed

in different Azure datacenter

Policy options:

-Performance: all requests sent to the closest datacenter-Failover: all requests sent to specified datacenter, unless datacenter is not available-Round Robin: all requests equally spread across all datacenters

Support for external Endpoints(outside Azure)!!!!

Media

Media Services

What Do We Mean by Media Services?Your Choice of Components for Building Custom Media

Workflows in the Cloud(you only pay for what you use)

Encoding Analytics

Windows Azure Media Services

LiveStreaming

FormatConversio

n

Content Protection

On-DemandStreaming

Advertising

Ingestion

Live Streaming: currently in private previewAnalytics: will be rolled out as they become available

“The Media Services team is working on a long list of upcoming blog updates for the week of the International Broadcasters Convention in Amsterdam starting on September 10th, so stay tuned for more details on our Live Streaming and Content protection services”

…from John Deutscher is currently the Principal Program Manager Lead for Azure Media Services….

Mobile ServicesEasily build cloud back-endsData, identity, push notifications, and scheduled scriptsWindows Store, Windows Phone, iOS, and Android, Xamarin, …

Break