Windows Azure through the eyes of an IT Pro (and how to cope with Devs and Business stakeholders)

1. Windows Azure through the eyes of an IT Pro(and how to cope with Devs and Business stakeholders) Mike MARTIN, Architect Crosspoint Solutions

2. Me.About(); Member of: Mike Martin Architect MEET Member Crew Member of Azug Windows Azure Insider Windows Azure MVP @Techmike2KX mike.martin@csps.be http://techmike2kx.wordpress.com

4. Trying DevOps from the IT Pro view • IT roles and challenges • Introduction to the Cloud for the IT Pro • Hybrid Scenarios • Building and deploying a Windows Azure Cloud Service • Managing identity with the Access Control Service

5. What do IT pros do today? • Install server hardware • Configure the network • Install the OS • Update, update, update…….. • Manage storage and backup • Apply security • Manage certificates • Deploy applications • Monitor application/OS health and performance • Match the business requirements by scaling to demand and being agile

6. Managing demand Allocated IT-capacities Load Forecast Not Enough Power Potential business loss Too Much Power IT CAPACITY Wasted capacity ActualLoad TIME * Don’t forget you are also paying for unnecessary software licencing while you are over capacity

7. Demand burst CLMs IT demand Compute capacity Ticket sales open Ticket sales open Time Concert ticket web site

9. Public Cloud computing • On demand compute and storage capacity • Internet based • Pay for what you use • Delivered as a service • Don’t expect to be able to change what’s delivered • It’s early days, expect things to change • Read the SLAs • If they don’t give you what you need, look to another vendor

10. Windows Azure • Building blocks for distributed services • Access control • Network connectivity • Connect on-premise and Cloud applications • Caching compute database storage Windows Azure Services Cloud services Virtual machines Web sites Windows Azure management Blobs, tables, queues Portal APIs On-premise management On-premise development Visual Studio, Azure SDK etc Windows Admin Server Tools

11. Setting the boundaries • Windows Azure is an extension of your IT environment • As IT Pros, you need to monitor, debug, scale, backup • Doing all the good things you do today • The anomaly is that developers have the potential to access compute and storage without asking you! • Fine for development but not for production Take control of your Windows Azure production environment

13. Ready to go… • Start by creating a subscription • Check for introductory offers • MSDN subscriptions include Windows Azure service www.windowsazure.com

14. MSDN Subscribers: you’ve got it, now use it Develop & Test on cloud VMs at no additional cost! Activate your MSDN Benefit & try it by 9/30 You could win* an Aston Martin V8 Vantage! Redeem your benefit today! http://bit.ly/140uB31 *No purchase necessary. Open to eligible Visual Studio Professional, Premium or Ultimate with MSDN subscribers as of June 1, 2013. Ends 11:59 p.m. PT on September 30, 2013. For full official rules including odds, eligibility and prize restrictions see website. Sponsor: Microsoft Corporation. Aston Martin is a trademark owned and licensed by Aston Martin Lagonda Limited.

15. What if … EA • Great for large usage • Offer granularity in departmens or tenants ea.windowsazure.com

16. App Controller Private keys stored in App Controller database Windows Azure On-Premise Granular delegation of access to subscriptions Managing Windows Azure subscriptions API authentication Public Key Public Key Windows Azure production API Authentication App controller Public Key Windows Azure service API Windows Azure Production Windows Azure Staging Private key stored in app controller database Windows Azure staging Windows Azure Service API Single view of multiple Windows Azure subscriptions Granular delegation of access to subscriptions

17. Demo Granularity Dev - Test management

18. Windows Azure Cloud Services Web Role 1 instance #3 Worker Role 1 • Request Database instance #2 instance #3 LB instance #1 instance #1 • Response Browser instance #0 instance #0 Scale upand down Communications via Queues and Tables

19. Web & Worker roles • Applications are specifically developed for Windows Azure Web roles, Worker roles and storage • Windows Azure applications can be run in a development environment • You cannot deploy and run them on-premise • Pay per role instance • Two instances required for 99.95% SLA • Add and remove instances based on demand • Load balancing is automatically configured

20. Choose your instance size • Each instance is deployed in its own VM • You can use RDP to access the VM • Cost is based on deployed instance sizes • Charged even if the instance is not running • Remember the SLA requires at least two instances per role

21. Storage • Local storage can be allocated on an instance bases • All Web and Worker roles are stateless so local storage should only be used for caching • Persistent storage is managed through • BLOBs • NTFS VHD drive can be stored in blobs and attached to instances • Tables • Queues • SQL Azure

22. Storage access • Blobs, tables and queues are accessible via URLs • Accessible via Representational State Transfer (REST) APIs • Uses HTTP methods : POST, GET, PUT and DELETE • Requests are signed with the storage key • All Windows Azure storage can be accessed from anywhere

23. Store, backup, recover your data Simple and fast on-ramp to Azure Active data instantly available locally Archives less used data to Windows Azure Recover data from any internet connection Reduce enterprise storage TCO by 60-80% Physical or Virtual Servers StorSimple Your Data Center

24. Store, backup, recover Microsoft SQL Server Backup and restore database to the cloud Direct URL backup to Azure Storage Restore in Azure Virtual Machine SQL Server Management Studio Benefits Reliable off-site data backup for SQL images Easily restore databases using VMs

25. Store, backup, recover your data Windows Azure Backup Backup datacenter data to Windows using System Center Data Protection Manager Backup and recover files/folders from Windows Server 2012 SP1 Your On-Premises Datacenter • Benefits • Reliable offsite data protection • Simple, familiar, integrated • Efficient backup and recovery • Easy set up Windows Server 2012 Windows Server 2012 Essentials Windows Server 2008 R2 (SP1) System Center 2012 DPM SP1

26. Demo Storage

27. Windows Azure Virtual Machines • Persistent VM roles • Yes, VMs as we know and love them  • Bring your own or use Microsoft provided • You update and maintain them • Possible to host: • Active Directory, SharePoint 2010, SQL Server and more… • 99.9% SLA on single-instance • Connect to on-premise using • Windows Azure Virtual Network

28. Windows Azure Virtual Network • On-Premise to Windows Azure routable VPN • Supports IPv4 routing • Bring your own IP addresses Windows AzurePersistent VMs

29. Develop, test, run your apps Test and development on-premises Limited hardware budget Limited software licensing Resource contention with VMs Compromised developer agility Realistic scale tests often challenging IT Admin Developers Use VMs Your Datacenter Provision VMs VMs in test/dev environment

30. Develop, test, run your apps Use VMs Developers IT Admin Provision VMs Test and development using Windows Azure Manage environment Cost effective (pay for what you use) Improved developer agility with platform services Ready to use gallery of images Ship tested in realistic scale scenarios Use existing development tools & languages Access on-premise resources if necessary

31. Develop, test, run your apps Start VMs and app development in Azure Deploy anywhere with no lock-in Your Datacenter, or Your Hoster Easy VM portability If it runs on Hyper-V, it runs in Windows Azure Production environment

32. Demo Virtual Machines

33. Deploying Cloud Services Web Role 1 instance #3 Worker Role 1 • Request Database instance #2 instance #3 LB instance #1 instance #1 • Response Browser instance #0 instance #0 Scale upand down Communications via Queues and Tables

34. The developer builds the application The binaries and definition (csdef) file are zipped into service package file • Configuration data values can be updated on the live system

35. Update & Fault Domains Web Role Inst #1 Web Role Inst #0 • Windows Azure distributes instances across multiple Update Domains to support in-place upgrades • One domain is updated at a time • Supports application and Windows Azure OS updates • Service remains running with reduced capacity • Similar concept used to support Windows Azure datacentre hardware failures • Instances are distributed across multiple fault domains • A single failure will allow service to remain running Worker Role Inst #1 Worker Role Inst #2 Worker Role Inst #0 Update Domain 0 Update Domain 1 Update Domain 2

36. Staging and production http://<name>.cloudapp.net • A service can be deployed to staging, tested and “moved” to production by swapping the VIP • A service upgrade can be deployed to staging and then swapped to the production environment • During the swap the current production environment is “moved” to staging LB Production Production URL LB Staging Staging URL http://<guid>.cloudapp.net

37. Demo Deploying and running applications

38. Demand burst with Windows Azure Scale prior todemand On-demand compute capacity and software lisencing IT Demand Compute Capacity Ticket sales open Ticket sales open Time Concert ticket website

39. Track demand – ensure success Forecast demand Available Required IT capacity Time

40. Managing Identity in the Cloud • Application • On-premise • Partner organization • Somewhere!!! • User • On-premise • Partner organization • Somewhere!!! • User’s Identity • On-premise • Partner organization • 3rd Party Identity provider Federation joins it all together User Name: Fred Password: ***** Age: 107 Country: Japan

41. Windows Azure Active Directory • Windows Azure AD includes the Access Control Service (ACS) • Provides a method for applications and services to authenticate and authorize users • ACS brokers authentication with popular identity providers • Live ID • Google • Yahoo • Facebook • http://socialsts.net/ • Relying parties can be applications or AD FS

42. Gathering data Role instance Windows data sources Event logs IIS logs Failed request log Performance counters Diagnosticmonitoring Role Local storage Windows Azure Storage Blobs & Tables On premise analysis

43. System Center 2012 puts you in the driving seat • App Controller • Deploy and manage services/roles and instance counts • Operations Manager • Monitoring health and performance

44. Demo Monitoring and diagnostics

45. What do IT pros do with Windows Azure? - Manage image libraries and deploy • Install server hardware • Configure the network • Install the OS • Update, update, update…….. • Manage storage and backup • Apply security • Manage certificates • Deploy VMs and applications • Monitor application/OS health and performance • Match the business requirements by scaling to demand and being agile - for cloud / on-premise connectivity New ways of supporting your enterprise and new opportunities

46. Azure Cloud offers you the opportunity to be the expert at bringing scalability and agility to your company’s applications and services

47. References / Things I mentioned • The Windows Azure Storage Level 666 session by Yves Goeleven • 10 tools of the trade for your #windowsazureenvironment on my blog • System Center Advisor

48. Thank you