Microsoft Azure - Istituto Nazionale Di Fisica Nucleare

Transcription

Microsoft AzureThe cloud platformbuilt for businessMario CavaldesiCloud Solution Architect

Cloud/On-Premises Comparison Chart( Private Cloud )

The next strategic opportunity is hereCloudMobileSocialHow do you usetechnologyinnovation Big data?to ustomergrowthReal-timeinsightsEmbrace newmodels

Cloud & IT StrategyPublic Cloud PlatformsSaaS(Software asa Service)?VirtualPhysical

The Azure Platform StrategySecurity urity &ManagementPublicCloudPlatform(Software as a Service)O365, CRM, VSO etc rd3 Party SaaS SolutionsMicrosoft Azure Stack& Cloud Platform SystemPublic, Global, Shared Datacenters

Industryvalidation"Microsoft’s comprehensive hybridstory, which spans applications andplatforms as well as infrastructure, ishighly attractive to many companies,drawing them towards the cloud ingeneral.”LYDIA LEONG,GARTNERMicrosoft Leads Everywhere Public Cloud IaaS (May 2015)Cloud Storage (June 2015)Enterprise App PaaS (Jan 2014)X86 Server Virt (July 2015)Operational DBMS Systems (Oct 2014)

Huge infrastructure scale is the enabler24 Regions Worldwide, 22 ONLINE huge capacity around the world growing every yearNorth Central USIllinoisCentral USIowaCanada CentralTorontoNorth EuropeIrelandCanada EastQuebec CityWest EuropeNetherlandsChina North *BeijingUS GovIowaEast USVirginiaWest USCaliforniaSouth Central USTexasUS GovVirginiaJapan EastSaitamaChina South *ShanghaiJapan WestOsakaIndia CentralPuneEast US 2VirginiaIndia WestMumbaiIndia SouthChennaiEast AsiaHong KongSE AsiaSingaporeAustralia EastNew South WalesBrazil SouthSao Paulo 100 datacentersTop 3 networks in the world2x AWS, 6x Google DC RegionsG Series – Largest VM in World, 32 cores, 448GB Ram, SSD Australia South EastVictoriaOperationalAnnounced/Not Operational* Operated by 21Vianet

GlobalAzure compliance audits and certificationsISO/IEC 27001SOC 1SOC 2PCI DSS L1 version 3Cloud Security AllianceCloud Security MatrixFedRAMPHIPAA(Healthcare)FIPS 140-2Life Sciences GxPFamily Educational Rights &Privacy ActEuropean UnionModel ClauseUnited KingdomG-CloudChinaMulti Layer Protection SchemeChinaCCCPPFSingaporeMulti-Tier CloudSecurityCriminal JusticeInformation SystemDefense InformationSystems Agency L2ITARDefense InformationSystems Agency L3-5ISO / IEC 27018UnitedStatesRegionalComingsoonSarbanes OxleyAustralian SignalsDirectorate I-RAPAssessment

Azure momentum 100,00020 Million 50 Trillion 5 TrillionNew Azure customersubscriptions/monthSQL database hoursused every dayStorage objectsin AzureStorage transactionsevery month425 Million60 Billion57%1 TrillionAzure ActiveDirectory UsersHits to Websites run onAzure Web App ServiceOf Fortune 500 Companiesuse Microsoft AzureMessages delivered everymonth with Event Hubs

Microsoft Azure

Microsoft Private Cloud(on premises hosted)Microsoft Azure

Microsoft Private Cloud(on premises hosted)Microsoft Azure

MicrosoftMicrosoftPrivateAzure ses hosted)Microsoft Azure

App innovationMicrosoftMicrosoftPrivateAzure StackCloud(on(on-premises/hosted)premises hosted)Microsoft Azure

Cloud-optimizedapplication platformCloud-consistentservice deliveryCloud-inspiredhybrid infrastructureMicrosoftMicrosoftPrivateAzure StackCloud(on(on-premises/hosted)premises hosted)

IaaS and PaaS based hosting optionsFeatures:WEB 99.95% Monthly SLA Support for Windows and Linux VM’s Fault Isolation Elastic Capacity First class .Net Support Support for a variety of languages andframeworks -FrameworksCLOUDVIRTUAL Open source support (Git, etc ).netnode.jsjavaphppython

Modern web appsMulti-tier applicationsEnterprise server applicationsPerfect if your app consists of client sidemarkup and scripting, server side scripting anda database. Powerful capability to scale out andup as needed.Cloud-based applications that separate applicationlogic into multiple tiers (i.e. caching middle tier,asynchronous background processes like orderprocessing) using both Web and Worker RolesRun your existing enterprise applications in thecloud, such as SQL Server, SharePoint Server orActive Directory.Continuous developmentApps that require advancedadministrationPorting existing line of business appsDeploy directly from your source coderepository, using Git or Team FoundationService.Popular open source appsLaunch a professional looking site with a fewclicks using apps like WordPress, Joomla!,Drupal, DotNetNuke and UmbracoCloud-based applications that require adminaccess, remote desktop access or elevatedpermissionsApps that require advancednetworkingCloud-based applications that require networkisolation for use with Windows Azure Connect orWindows Azure Virtual NetworkChoose an image from the library or upload yourown VHD.Windows or Linux operating systemSupport for Windows Server, along withcommunity and commercial versions of Linux.Connect virtual machines with cloud services totake full advantage of PaaS services.

Infrastructure as a Service introduces new functionality that allows full control and management ofboth Windows and Linux virtual machines along with an extensive virtual networking offering.Easily migrate existingapplications as-is to the cloudStart from a pre-built image fromour image libraryAssist New Cloud AppDevelopment by IntegratingIaaS and PaaS FunctionalityUpload your own VHD from onpremises.Set up new virtual machines inWindows Azure with only a fewclicks.Agentless Deployment forWindows ServersCreate Your Own CustomizedImagesSupport for community andcommercial versions of LinuxMove images back on premise asnecessaryRun enterprise applicationssuch as SQL Server,SharePoint or Active Directoryin the cloudEasily create hybrid cloud andon-premises solutions withVPN connectivity between theWindows Azure Data Centerand your own network.

Microsoft AzureCertified

UbuntuOracle LinuxSUSECentOS-BasedCoreOSCommunity

Cloud Service and Virtual NetworkLoad BalancingVM Storage ArchitectureAvailability Set

Cloud Services and Endpoints Enable connectivity to your Virtual Machines Route requests from Cloud Service to VirtualMachine usingan public port and a private port Can be added to a Load-Balanced Set Can create a list of allowed/denied IP Address Rangesusing Access Control List (ACL) ACL set to Allow * (all) by defaultSQL Direct EndpointsLoad Balanced EndpointsSQL Client: Port 1455WebBrowser: Port 80 Public and Private Ports may vary Other Options IIScloud serviceReserved Static IP for VM InstanceReserved IP for Cloud ServiceIIS

Azure Virtual MachineC:\OS DiskDisk CacheD:\Temporary Disk(Contents can be lost)E:\, F:\, etc.Data Disks

Azure Virtual MachineC:\OS DiskDisk CacheD:\Temporary Disk(Contents can be lost)E:\, F:\, etc.Data DisksG:\, H:\, etc.SMB Share

Virtual Machine SizesCompute Instance NameVirtual CoresRAMExtra Small (A0)Shared768 MBSmall (A1)11.75 GBMedium (A2)23.5 GBLarge (A3)47 GBExtra Large (A4)814 GBA5214 GBA6428 GBA7856 GBA8856 GBA916112 GBComputeInstance NameVirtual CoresRAMComputeInstance NameVirtual CoresRAMD113.5 GBG1228 GBD227 GBG2456 GBD3414 GBG38112 GBD4828 GBG416224 GBD11214 GBG532448 GBD12428 GBD13856 GBD1416112 virtual-machines/Each Persistent Data Disk Can be up to 1 TB with up to 32 disks per VM

UPDATE DOMAINS ARE HONORED BY HOST OS UPDATES

Multi Tier ApplicationInternet

Traffic Manager: DNS-based Load Balancingwww.yourapp.comPerformance - Direct to “closest” service based on network latencyRound-robin - Distribute equally across all servicesFailover - Direct to “backup” service if primary fails—also included in other policies

Windows AzureRegion 1BLOBStorageDNS QueriesTrafficManagerWindows AzureRegion 2

Multiple NICs in Azure VMsMultiple NICs enable virtualappliances in AzureUp to 4 NICs per VMAzure Virtual MachineMAC/IP addresses persistthrough VM life :133.44.55.66Separate frontend-backendtraffic, and management-dataplanesInternet

Bring Your Appliances to the CloudBuilding blocks Multiple NICs MAC address persistenceAppliance ecosystem Barracuda NG Firewall Citrix NetScaler Riverbed Steelhead, SteelApp,SteelStore More to come!“Azure Certified”

Visual Studio and MSDNCreate and Debug a VMMSDN specific images for tools

Platform ServicesSecurity APIAppsWeb AppsHybridOperationsVisual StudioAzure SDKAzure ADConnect HealthPortalBatchRemote ubsTeam onAutomationKey rvicesServiceBusStore /MarketplaceVM Image Gallery& VM DepotAD PrivilegedIdentityManagementMediaServicesContent DeliveryNetwork (CDN)HDInsightMachineLearningSQLDatabaseSQL Infrastructure Services

Designed for secure mission-critical applicationsOptimized for Availability and Automatic scaleAgility through Continuous DeploymentHybrid Connections / VPN SupportScheduled BackupAzure Active Directory IntegrationSite Resiliency, HA, and DRWeb JobsRole Base Access ControlAudit / ComplianceEnterprise MigrationClient CertsCacheIP Restrictions/ SSLWeb SocketsSQL, MySQL, DocDB, & MongoSticky SessionsAuthorization/ AuthenticationAutomated DeploymentAutoScaleBuilt-in Load BalancingWW Datacenter CoverageEnd Point Monitoring & AlertsApp GalleryDR Site SupportWildCard SupportDedicated IP addressHTTP CompressionCDN Support for WebsitesPremium WordPressApp Services EnvironmentsRemote Debugging w/ Visual StudioSite Staging SlotsTesting in ProductionContinuous Integration/DeploymentGit, Visual Studio Online and GitHubApp & Site DiagnosticsOS & Framework PatchingSite Extensions GalleryNET, PHP, Python, Node, JavaFramework InstallerBrowser-based editingAuto-HealingLogging and AuditingAdmin-SiteSupport Site ExtensionAll features and capabilities are shared across all of App Service application (Web, Mobile, and API)

Develop apps with .NETNode.jsPython JavaPHP

Gallery

2) Code Repository3) Build4) Deploy to slot5) Test6) SwapAzureContoso App1) Developers8) Monitor and Improve7) Deploy to Cloud

Developer 1SwapGitHub(VSO)Developer 2WebsiteProduction

Staging

Staging

Staging

Staging

Testing in Prod.80%100%20%

2) Code Repository3) Build4) Deploy to slot5) Test6) SwapAzureContoso App1) Developers6) Monitor and Improve7) Deploy to Cloud

WebJobs

WebJobs

AutoScale

AutoScale

AutoScale

AzureSiteRecoveryOne solution for multiple infrastructuresOn-premises to On-premises protection(Site-to-Site)Microsoft AzureSite RecoveryMicrosoft AzureSite RecoveryOrchestrationDownload -VRecoverySitePrimarySiteVMware /PhysicalOrchestrationandReplicationOn-premises to Azure protection(Site-to-Azure)Microsoft AzureSite RecoveryOrchestrationand ReplicationMicrosoft AzureSite RecoveryOrchestrationand ReplicationInMageScoutVMware r-VPrimarySiteKey features include:Automated VM protection and replicationNo-impact recovery plan testingOrchestrated recovery when neededRemote health monitoringCustomizable recovery plansReplicate to – and recover in – AzureNear zero RPOMinimal RTO – few minutes to hoursHeterogeneous physical and virtual supportVMware /Physical

Preview Deployment ArchitectureSource: VMware VMs& Physical ServersCustomer 1ProcessServerMicrosoft AzureSite RecoveryCustomer 1DataChannelSource: VMware VMs& Physical ServersTarget: Microsoft AzureProcessServerMicrosoft AzureCustomer 2Process Server – Used forCaching, Compression &EncryptionCustomer 2Config Server – Used forCentralized ManagementMaster Target – Used asa repository & forretentionMobility Service –Captures all data writesfrom memory

Summary of Actions

Microsoft Azure StorSimple Big PictureON-PREMISES DATA CENTERCLOUD DATACENTERCloudSeries 8000Hybrid Storage agerStorSimpleSnapshotManagerPlug-inAdministrator

Secure data throughout the solutionCloudAccount AccessStorSimple Virtual ApplianceAccount authenticationwith User ID, PasswordIT administratorData At-restAES-256 bitencryptionStorSimpleCustomer defined encryptionkeys stored on device 2 x 512bit keysData In-flightAES-256 bit encryption

Consolidated management of appliancesStorSimple ManagerPhysical AppliancePhysical ApplianceVirtual Appliance(Service Data Encryption Key is generated, on device console, when first device is registered)Microsoft Confidential

StorSimple Virtual ApplianceVMData

IT agility in Azure with StorSimple Virtual ApplianceThe StorSimple Virtual Appliance facilitates data mobility of productiondatasets for the purpose of disaster recovery, on-demand developmentand test infrastructure, and Cloud applications.The StorSimple Manager service provides workflows for failover ofdatasets for disaster recovery and clone workflows for replicatingproduction datasets in Azure for Cloud applications and developmentand test scenariosVol AiSCSIVol BVol CVol DMicrosoft AzureiSCSIVol DiSCSIInternetStorSimpleManager

DR to secondary datacenter or Virtual ApplianceMicrosoft AzureThinInstantStorSimple VirtualAppliancePredictableLocation independent recovery fromcloud snapshotCloud SnapshotsPeriodic VSS consistent cloud snapshotsof production dataProduction DataDatacenter-1Production DataDatacenter-2

Enterprise server applications Run your existing enterprise applications in the cloud, such as SQL Server, SharePoint Server or Active Directory. Windows or Linux operating system Support for Windows Server, along with community and commercial versions of Linux. Connect virtual machines with cloud services to take full advantage of PaaS services.