WS-013 Azure Stack HCI
WS-013 Azure Stack HCI
Stack HCI
The purpose of this lesson is to describe characteristics of private and hybrid cloud solutions
that are part of the Azure Stack portfolio, consisting of Azure Stack HCI, Azure Stack Hub, and
Azure Stack Edge
Topics:
o Azure Stack portfolio
The three Azure Stack products share the following characteristics, which reflect their
common goal of facilitating transition to a hybrid cloud model that takes advantage of Azure-
based capabilities:
On-premises deployments
Close integration with Azure
Accelerated replacement and consolidation of legacy infrastructure
Support for disconnected scenarios, without direct connectivity to Azure
Azure Stack Hub
In the simplest terms, you can think of Azure Stack Hub as Azure for on-premises
environments
To determine whether your workloads are suitable for Azure Stack Hub rather than Azure,
consider:
o Azure service dependency
o Performance requirements
o Cost
Azure Stack Edge facilitates processing of on-premises data and transferring it to Azure
Storage
Azure Stack Edge has three primary components:
o Azure Stack Edge physical, rack-mounted appliance that you can deploy on edge
networks of your on-premises datacenters to function as a network storage gateway.
It includes an integrated FPGA component, which enables accelerated AI inferencing
for ML models
o Azure Stack Edge resource accessible via the Azure portal that allows you to
administer and monitor multiple Azure Stack Edge physical appliance
o Azure Stack Edge local web UI, which provides direct connection to individual Azure
Stack Edge appliances, facilitating initial installation and supporting such
management capabilities as restarting the appliances or viewing and copying local
logs
Azure Stack HCI
o (Optionally) Virtualized networking based on SDN with the Network Controller server
role
The most common Azure Stack HCI scenarios include:
o Branch office and edge
o VDI
o Scale-out storage
Lesson 1: Test your knowledge
This lesson provides an overview of the technologies that serve as its underlying core
components of Azure Stack HCI
Topics:
o Hyper-V
o Failover clustering
o Guest clustering with shared disks
o Hyper-V Replica
o Cluster Shared Volumes
o Scale-Out File Servers
o Storage Replica
o Software-defined storage
o Software-Defined Networking
o Guarded fabric
o Cluster sets
Hyper-V
The Hyper-V role in Windows Server 2019 offers a wide range of capabilities:
Hyper-V scalability
Automatic virtual machine activation
Host resource protection and discrete device assignment
Runtime resize of VM memory, add and resize VHDX, Hot-Add and vNIC naming
Checkpoints and live migration
Virtual machine network and storage resiliency
Start order priority for clustered guest virtual machines
Windows PowerShell Direct
Nested virtualization
Virtualization-based security
Rolling upgrades and Integration Services for Windows VMs through Windows Update
Failover clustering
Failover clustering at the VM level ensures that cluster roles inside a VM are highly available
You might need shared storage for the quorum, for cluster roles configuration, and for data
storage
You can use for this purpose iSCSI, Fibre Channel SAN, or virtual hard disks (VHD Set) as
shared storage
VHD Set files have several requirements:
o The virtual hard disk must use the .vhds format
o A shared virtual hard disk can only store applications and data
o You can enable virtual hard disk sharing only if the VM is turned off
o To use virtual hard disk sharing, the VM must have Integration Services installed
Guest clustering with shared disks (2 of 2)
Hyper-V Replica is a disaster recovery feature built into Hyper-V that replicates VMs to a
secondary location and, if needed, to a third location
Hyper-V Replica has several prerequisites:
o Windows Server with the Hyper-V role
o Sufficient storage
o Network connectivity
o Firewall rules that allow replication between the primary and replica sites
You can establish Hyper-V Replica between the Hyper-V hosts irrespective of whether they
are nodes in a failover cluster or not
Hyper-V Replica offers four different configurations from the resiliency standpoint:
o Both Hyper-V hosts are standalone servers
o The Hyper-V host at the primary location is a node in a failover cluster and Hyper-V
Replica is on the standalone server
o Each Hyper-V host is a node in a different failover cluster
o A Hyper-V host at the primary location is a standalone server and a Hyper-V host at
the secondary location is a node in the failover cluster
Hyper-V Replica (3 of 4)
CSV enables multiple cluster nodes to concurrently access the same shared storage LUN
CSV characteristics include:
o CSV file system
o Simplified CSV setup
o Uniform presentation of CSV
o Support for BitLocker
o Integration with SMB Multichannel and SMB Direct
o Integration with Storage Spaces
o Ability to use local storage through the Storage Spaces Direct feature
o Ability to scan and repair volumes while online
Scale-Out File Servers
Scale-Out File Server is a failover clustering feature that allows multiple cluster nodes to
perform read and write operations targeting files on the same CSV
A Scale-Out File Server provides the following benefits:
o Improved scaling
o Load-balanced utilization
o Simplified management
Storage Replica
o Cluster-to-cluster
o Server-to-server
o Server-to-self
o Hyperconverged
Software-Defined Networking
SDN provides a method to centrally configure and manage physical and virtual network
devices
SDN abstracts your network infrastructure, defines policies to control the network, and
gives you the tools to manage the network
o Network abstraction
o Network policies
o Network management
SDN offers agility, security, and efficiency
SDN consists of the following components:
o HNV
o Hyper-V virtual switch
o Network Controller
o RDMA and RoCE
o SET
Guarded fabric
Windows Server 2019 supports shielded VMs by using BitLocker to protect them from
unauthorized access and tampering
Shielded VMs can only run on a guarded fabric, which includes trusted Hyper-V hosts and
an HGS host or cluster
Guarded fabric can run three types of virtual machines:
o Unprotected VMs
o Encryption-supported VMs
o Shielded VMs
HGS can use one of three mutually exclusive attestation modes to authorize Hyper-V hosts:
o TPM-trusted attestation
A cluster set is a group of Windows Server 2019 compute, storage, and hyperconverged
clusters
Cluster sets address two primary challenges:
o Availability
o Scalability
o Member clusters
Managing Azure Stack HCI requires a range of management tools—beyond those commonly
used for traditional Windows Server management. This lesson provides an overview of these
tools and focuses on those that you will use throughout the course to deploy, configure, and
troubleshoot Azure Stack HCI
Topics:
o Windows Admin Center
Windows Admin Center is the recommended tool for managing Azure Stack HCI
deployments
Windows Admin Center offers several benefits:
o Simple deployment
o Enhanced security
o Extensibility
Demonstration:
Deploy
hyperconverged
infrastructure by
using Windows
Admin Center
System Center Virtual Machine Manager and Operations Manager
The two System Center 2019 products that are of interest in the context of this course are:
o System Center Virtual Machine Manager:
• Simplifies configuring and managing datacenter components as a single fabric in
VMM
• Can add, provision, and manage Hyper-V and VMware virtualization hosts and
clusters
• Manages adding networking resources to the VMM fabric
• Can discover, classify, provision, allocate, and assign local and remote storage
• Contains a library of file-based resources and resources that are not file-based
that are used to create and deploy VMs and services on virtualization hosts
o System Center Operations Manager:
• Simplifies monitoring of computers, devices, services, and applications
• Automatically analyzes health of monitored objects, sends alerts when problems
are identified, and provides information to help with troubleshooting
PowerShell and PowerShell DSC (1 of 4)
Windows PowerShell Remoting uses an open standard protocol called Web Services for
Management (WS-Management), which relies on HTTP and HTTPS as its transport protocols
PowerShell Remoting supports both workgroup and AD DS domain–based scenarios:
o PowerShell Remoting in workgroup scenarios:
• Is automatically enabled
• Relies on Kerberos authentication
PowerShell and PowerShell DSC (3 of 4)
o ApplyAndMonitor
o ApplyAndAutoCorrect
node ("localhost") {
WindowsFeature IIS {
Ensure = "Present"
Name = "Web-Server"
}
WindowsFeature AspNet45 {
Ensure = "Present"
Name = "Web-Asp-Net45"
}
xWebsite DefaultSite {
Ensure = "Present"
Name = "Default Web Site"
State = "Stopped"
PhysicalPath = “C:\inetpub\wwwroot"
DependsOn = "[WindowsFeature]IIS"
}
}
}
Demonstration:
Use PowerShell
and PowerShell
DSC to configure
and manage
Windows Server
2019
Azure Arc
Azure Arc is a set of technologies for customers who want to simplify complex and
distributed environments across on-premises, edge, and multicloud environments
Azure Arc hybrid capabilities:
o Azure Policy guest configuration
Azure offers a wide range of services that provide integration capabilities. The purpose of this
lesson is to provide an overview of these capabilities applicable to Azure Stack HCI–based
scenarios
Topics:
o Cloud Witness
o Azure Monitor
o Azure Backup
Cloud Witness is a Failover Clustering quorum option optimal for distributed and cloud-
based scenarios
To implement Cloud Witness, you must have an Azure Storage account with the following
configuration:
o General Purpose v1 or General Purpose v2 Azure Storage account kind
o Registered server
o Server endpoint
o Cloud endpoint
o Cloud tiering
o Cloud backup
o Disaster recovery
Azure Monitor
Azure Monitor provides comprehensive cloud-based monitoring for cloud and on-premises
environments
Azure Monitor supports the following features:
o Collection and monitoring of metrics, activity, and diagnostics logs, and events from
a wide range of Azure services and computers residing in on-premises datacenters
and third-party cloud providers
o A quick way to assess the status of your environment in the Azure portal
Azure Site Recovery is a disaster recovery and business continuity service that provides
replication and orchestration
Azure Site Recovery provides support for three disaster recovery scenarios:
o Failover and failback between two on-premises sites
Provisioning Azure Stack HCI is a relatively complex undertaking, yet practically every
implementation can be divided into the same sequence of high-level logical steps. This lesson
provides an overview of this process
Topics:
o Plan for Azure Stack HCI
Azure Stack HCI complements Azure Stack Hub and Azure Stack Edge products
Azure Stack HCI use cases include:
o Branch office and edge: reasonably priced yet highly available platform for business
applications and edge workloads that incorporate containerization and Azure IoT
Edge technologies
o VDI: large scale VDI deployments, with Microsoft Remote Desktop Services or
equivalent third-party products serving as a virtual desktop broker
o Highly performant Microsoft SQL Server: highly available, mission-critical Always On
availability groups–based deployments of Microsoft SQL Server
o Trusted enterprise virtualization: support for VBS to implement the virtual secure
mode as protection from operating system-based malware
o Scale-out storage: highly available, high-performing, and scalable storage that takes
advantage of locally attached drives
Plan for and provision hardware (1 of 6)
Considerations that you must take into account when deciding on the optimal design
include:
o The total number of physical servers per cluster
o Total storage capacity and resiliency levels, which directly affect the usable capacity
Design guidance:
o On average, plan for 40 users per node, with 10 light, 10 heavy, and 20 power users,
minimizing overcommit. Enable deduplication and compression, and account for
additional demand during boot, sign-in storms, maintenance events, and node
failures considerations (per Requirements
Hardware
node)
CPU core count medium
frequency: medium-high
Storage capacity: medium
performance/tiered layout: two-tier, NVMe + SSD
15,000 IOPS are sufficient to account for boot and sign-
in storms
Memory capacity: high
performance: medium
Network (east/west) bandwidth: medium
Plan for and provision hardware (4 of 6)
Design guidance:
o Account for lower CPU and higher storage capacity requirements
Azure Stack HCI consists of hardware from OEM partners validated and certified by
Microsoft and several Windows Server 2019 Datacenter roles and features
In general, when deploying Azure Stack HCI, use the following high-level steps:
1. Assign custom computer names to Windows Server 2019 physical Hyper-V hosts
3. Add relevant Windows Server 2019 roles and features for each node
The post-deployment configuration of Azure Stack HCI is highly dependent on the intended
use case
It is common to implement hybrid functionality by using Windows Admin Center:
o Azure File Sync
o Azure Monitor
Before you deploy production workloads into an Azure Stack HCI cluster, you should first
validate that your intended configuration actually meets the intended performance
objectives
You can perform such testing by using:
o VM Fleet
o DiskSpd
Lesson 5: Test your knowledge
1. Which platform should you use to implement virtualized workloads that rely on trusted
enterprise virtualization and provide you with full access to the underlying hardware?
2. Which platform should you use to implement virtualized workloads that can be deployed
by Azure Resource Manager templates and provide the minimum latency when
connecting from on-premises applications?
3. Which platform should you use to deploy a physical appliance that applies Machine
Learning (ML) models to process on-premises data and transfers it to Azure Storage?
Module-review questions (2 of 3)
4. Which of the following Hyper-V Replica components is used only when Hyper-
V hosts participating in the replication are members of a failover cluster?
a. Replication engine
b. Hyper-V Replica Broker
c. Change tracking module
d. Network module
5. Which of the following do you require to implement Storage Replica?
a. Active Directory Domain Services (AD DS) environment
b. Storage Spaces with SAS JBODs
c. Remote Direct Memory Access (RDMA)-based network adapters
d. Round trip latency no larger than 2 ms
Module-review questions (3 of 3)
1. Which platform should you use to implement virtualized workloads that rely on trusted
enterprise virtualization and provide you with full access to the underlying hardware?
Azure Stack HCI
2. Which platform should you use to implement virtualized workloads that can be deployed
by Azure Resource Manager templates and provide the minimum latency when
connecting from on-premises applications?
Azure Stack Hub
3. Which platform should you use to deploy a physical appliance that applies ML models to
process on-premises data and transfers it to Azure Storage?
Azure Stack Edge
Module-review answers (2 of 2)
4. Which of the following Hyper-V Replica components is used only when Hyper-
V hosts participating in the replication are members of a failover cluster?
b. Hyper-V Replica Broker
5. Which of the following do you require to implement Storage Replica?
a. Active Directory Domain Services (AD DS) environment
6. Which of the following do you require to implement shielded VMs?
a. Virtual trusted platform module (TPM)
7. Which two Azure resources must you provision first to implement Azure Update Managem
ent? Choose two.
d. An Azure Automation account
e. An Azure Log Analytics workspace
Thank you