Azure Bootcamp for IT pros
8 likes2,964 views
This document contains contact information and background about Asaf Nakash. It lists his job title as GM and CTO of Dario IT Solutions and experience with Azure technologies like Azure XHub and Azure For ITPros. It includes his email, phone number, and LinkedIn profile. The rest of the document contains slides about Azure capabilities including hybrid cloud, regions, virtual machine types, storage, networking, and deployment best practices.
![ARM templates can:
• Simplify deployment
• Simplify roll-back
• Provide cross-resource configuration
and update support
• Be used as a learning tool to build
to suit
Azure templates are:
• Source file, checked-in
• Specifies resources and dependencies
(VMs, websites, DBs) and connections
(configuration, LB sets)
• Configurable parameters for
input/output
Azure Resource Manager templates
DEPENDS ON SQLDepends on SQL
SQL-A
website
[SQL CONFIG] VM (2x)
ARM template
SQL-A
DB
Website Virtual machines
Depends on SQL
SQL configuration](https://image.slidesharecdn.com/01txsghtlyavvd0r9mdi-signature-6656d1e1338b0ea58040715b630cf440c91aeb7ded2f6a6ee7759ccd343607c9-poli-160413235249/85/Azure-Bootcamp-for-IT-pros-142-320.jpg)
Ad
More Related Content
What's hot (20)
Viewers also liked (20)
Ad
Similar to Azure Bootcamp for IT pros (20)
![[Cloud Summit 2010] Peter Coffee - Sales Force](https://cdn.slidesharecdn.com/ss_thumbnails/pcoffeecloudvisionbrazil201008-100826090740-phpapp02-thumbnail.jpg?width=560&fit=bounds)
Ad
Recently uploaded (20)
Azure Bootcamp for IT pros
- 2. About me 33, Married from Yavne Mamram Dario IT Solutions – GM & CTO MRS Azure Azure XHub - #12 Hackathons – F5, Checkpoint Azure For ITPros - #11 [email protected] 0549700780 https://il.linkedin.com/in/nakash https://www.facebook.com/nakashon https://github.com/nakashon/ • https://il.linkedin.com/in/nakash
- 5. Enterprise proven Hybrid Hyper-scale Open + Flexible Open & flexible Applications Infrastructure Management Databases & Middleware App Frameworks Linux
- 6. There is no language, app, device, database, OS or tool that doesn’t work with Azure!
- 7. Enterprise proven Hybrid Hyper-scale Open & flexible Dev + IT productivityDeveloper & IT productivity Visual Studio GitHub Eclipse Chef + Puppet Powershell
- 8. Enterprise proven Hybrid Hyper-scale Open & flexible Platform for SaaS extensibility SaaS extensibilityDeveloper & IT productivity
- 9. Enterprise proven Hybrid Hyper-scale Open & flexible Trustworthy More compliance certifications than any other cloud Trustworthy Developer & IT productivity Trustworthy Platform for SaaS extensibility
- 10. Partners
- 11. Integration Heterogeneity Security Enterprise ready by design
- 12. AZURE REGIONS
- 15. >90,000 New Azure customer subscriptions/month 1.5Trillion Messages per month processed by Azure IoT >500Million Users in Azure Active Directory 777Trillion Storage Transactions per day >1.5Million SQL Databases running on Azure >40% Revenue from Start-ups and ISVs Azure momentum
- 16. A cloud you can trust “Businesses and users are going to embrace technology only if they can trust it.” At Microsoft, we never take your trust for granted • We are serious about our commitment to protect customers in a cloud first world. • We live by standards and practices designed to earn your confidence. • We collaborate with industry and governments to build trust in the cloud ecosystem. – Satya Nadella
- 17. Security design and operations Microsoft makes security a priority at every step, from code development to incident response. Security Development Lifecycle (SDL) Company-wide, mandatory development process that embeds security into every phase of development process. Assume breach simulation Dedicated security expert “red team” that simulate real-world attacks at network, platform, and application layers, testing the ability of Azure to detect, protect against, and recover from breaches. Global, 24x7 incident response service that works to mitigate the effects of attacks and malicious activity. Incident response 17
- 18. ISO/IEC 27001 SOC 1 SOC 2 PCI DSS L1 version 3 Cloud Security Alliance Cloud Security Matrix HIPAA (Healthcare) FedRAMP FIPS 140-2 Life Sciences GxP Family Educational Rights & Privacy Act European Union Model Clause China Multi Layer Protection Scheme United Kingdom G-Cloud Singapore Multi-Tier Cloud Security China CCCPPF Australian Signals Directorate I-RAP Assessment Criminal Justice Information System Defense Information Systems Agency L2 Sarbanes Oxley ITAR Defense Information Systems Agency L3-5 ISO / IEC 27018 Azure compliance audits and certifications Global United States Regional Coming soon
- 20. Microsoft Azure Trust Center
- 23. Azure Automation Operational Insights Direct DSC and PowerShell Migration and DR Identity
- 24. Azure Site Recovery: Protect VMWare and Physical Servers in Public Preview Azure Backup Generally Available Azure API Management Premium simplifies high availability and massive scale for APIs ExpressRoute for Office 365 Azure Active Directory Dynamic Membership For Groups Automatic Password Change for Social Media Shared Accounts Compute-Intensive A10 and A11 Virtual Machine Instances Remote Desktop app for Windows Phone support for Gateway and Remote Resources Informatica Cloud Agent availability in Linux and Windows Virtual Machines Azure DocumentDB Hadoop Connector Azure HDInsight support for more VM sizes Enterprise-Grade Array-Based Replication and Disaster Recovery
- 25. Platform Services Security & Management Infrastructure Services Web Apps Mobile Apps API Management API Apps Logic Apps Notification Hubs Content Delivery Network (CDN) Media Services HDInsight Machine Learning Stream Analytics Data Factory Event Hubs Mobile Engagement Active Directory Multi-Factor Authentication Automation Portal Key Vault Biztalk Services Hybrid Connections Service Bus Storage Queues Store / Marketplace Hybrid Operations Backup StorSimple Site Recovery Import/Export SQL Database DocumentDB Redis Cache Search Tables SQL Data Warehouse Azure AD Connect Health AD Privileged Identity Management Operational Insights Cloud Services Batch Remote App Service Fabric Visual Studio Application Insights Azure SDK Team Project VM Image Gallery & VM Depot
- 29. INTERNET
- 30. Internet IP addresses and load balancing LB
- 31. Reserved IPs can move!
- 32. DNS names for public IP
- 33. User Defined Routes (UDR)
- 34. Multiple NICs in Azure VMs
- 36. Connect via an encrypted link over public internet CUSTOMER SITE INTERNET / VPN GATEWAYS MICROSOFT CLOUD PUBLIC INTERNET EXCHANGE PROVIDER PUBLIC INTERNET MICROSOFT CLOUD NETWORK SERVICE PROVIDER WAN MICROSOFT CLOUD
- 37. VPN Gateways for virtual network VIRTUAL NETWORK GATEWAY SKU EXPRESSROUTE GW THROUGHPUT VPN GW EXPRESSROUTE COEXISTENCE VPN GW THROUGHPUT VPN GW MAX IPSEC TUNNELS COST (USD) / HOUR BASIC 500 MBPS NO 100 MBPS 10 $0.04 STANDARD 1000 MBPS YES 100 MBPS 10 $0.19 PERFORMANCE 2000 MBPS YES 200 MBPS 30 $0.49 NOT
- 40. Network Security Groups INTERNET
- 42. VM size options
- 43. Highest value VM size General purpose Higher memory options A-series family
- 44. A0 – A4 Highest value VM size Basic and Standard sizes Standard_A0 – Standard_A4 Basic_A0 – Basic_A4 The A family
- 45. A5 – A7 High memory configuration Local storage: Magnetic Standard_A5 – Standard_A7 The A family
- 46. A8 – A11 High performance RDMA Higher performance CPUs Local storage: Magnetic Standard_A8 – Standard_A9 Standard_A10 – Standard_A11 The A family
- 47. 60% faster CPU Up to 112 GB memory Local SSD storage D-series family
- 48. Optimized for data workloads Up to 32 CPU cores, 448 GB RAM, 6.5 TB local SSD Latest generation Intel processor G-series family
- 49. N family of virtual machines Announcing
- 50. Integrating GPU capabilities into Azure Infrastructure Competitive Price and Performance Supporting both Compute and High-End Visualization Partnership with NVIDIA
- 51. Cloud-based Streaming and Gaming Video Processing / Encoding Workloads Accelerated Desktop Applications (OpenGL and DirectX) GPU Compute (CUDA and OpenCL) - single and multiple machine workloads
- 54. N1 N10 N11 N12 N21 CPU Cores (E5-2690v3) 6 6 12 24 24 RAM (GB) 64 64 128 256 256 SSD (TB) ~0.5 ~0.5 ~1.0 ~2.0 ~2.0 Network Azure Network Azure Network Azure Network Azure Network Azure Network RDMA Dedicated Back End GPU Resources 1 x M60 GPU (1/2 Physical Card) 1 x K80 GPU (1/2 Physical Card) 2 x K80 GPUs (1 Physical Card) 4 x K80 GPUs (2 Physical Cards) 4 x K80 GPUs (2 Physical Cards)
- 55. Getting started >_ REST API Virtual Machines Management portal Scripting (Windows, Linux and Mac) Select image and VM size New disk persisted in storage Cloud Blob Storage Comprehensive Networking Windows Server Linux Boot VM from new disk General Purpose Basic Standard Optimized Compute Performance Optimized Network Optimized
- 56. Capture VM images My DB Image @ today
- 58. Why Linux on Azure?
- 59. Our customers are asking for it One out of 4 VMs run Linux/OSS Enterprise grade leadership Only true hybrid cloud Why Linux on Azure
- 60. Agility Source: McKinsey Global Survey Results, “Putting Strategy to the Test” ❝No-regretmovesthat will pay off whateverhappens,and real optionsthat involverelativelylow costsnow but can be elevatedto a higher level of commitmentas conditionschange.❞ Agility is the #1 element of corporate strategy today! % of respondents indicating their firm’s strategy based on… 59% Understanding our advantage 70%Flexibility 59% Resource reallocation 56% Market segmentation 55% Exploring all alternatives 54% Belief in basic assumptions 53% Relative advantage 52% Future market conditions 46% Planning for uncertainties 33% Data-driven insights
- 61. Economics Your application portfolio—what does it look like? S M T W T F S Capacity needed (max+20%) Save 20-30% J F M A M J J A S O N D Capacity needed (max+20%) Save 60-80% Individual application Dev/test environment in the cloud Application portfolio All dev/test and production environments in the cloud On and off (30%) Growing fast (15%) Unpredictable bursting (25%) Pred. bursting (20%) 24x7 steady
- 62. Linux in Azure Ultimate Control Cost & Agility Virtual Machines VM Extensions + Containers VM ScaleSets Cloud Foundry, Container Services (future) Service Fabric (future) IaaS PaaS Brying your Linux Automate everything Elastic Declarative Stateless & State full
- 64. Blobs Simple named files along with metadata for the file.
- 65. Microsoft Azure Storage Highly durable and scalable Multiple copies of your data Financially backed SLAs Storage for objects, tables, drives Supports REST APIs Availability and DR: Local Redundancy
- 66. West DCEast DC > 400 miles Microsoft Azure Storage Defend against regional disasters. Geo replication Availability and DR: Geo-replication
- 67. Internet Customer Datacenter StorSimple Hybrid Storage Array iSCSI Windows File Server Linux File Server VMware Server
- 68. Oracle CouchDBDB2Postgres MongoDBCassandra RavenDB Azure data management offerings MySQLSQL DB RedisDocument DB Relational No-SQL
- 69. fully featured RDBMS transactional processing rich query managed as a service elastic scale internet accessible http/rest schema-free data model arbitrary data formats Data Services in Azure
- 71. Premium storage Virtual machine Disk provisioning Disk provisioning SSD provisioning VM/network provisioning Server SSD Premium storage blobs
- 72. Multiple storage accounts are often required! VM size CPU cores Max disk IOPS (per VM) Max disk bandwidth (per VM) Cache size (GB) STANDARD_DS1 1 3,200 32 MB per second 43 STANDARD_DS2 2 6,400 64 MB per second 86 STANDARD_DS3 4 12,800 128 MB per second 172 STANDARD_DS4 8 25,600 256 MB per second 344 STANDARD_DS11 2 6,400 64 MB per second 72 STANDARD_DS12 4 12,800 128 MB per second 144 STANDARD_DS13 8 25,600 256 MB per second 288 STANDARD_DS14 16 50,000 512 MB per second 576 STANDARD_GS1 2 5000 125 MB per second 264 STANDARD_GS2 4 10,000 250 MB per second 528 STANDARD_GS3 8 20,000 500 MB per second 1,056 STANDARD_GS4 16 40,000 1,000 MB per second 2,112 STANDARD_GS5 32 80,000 2,000 MB per second 4,224 Storage disk type P10 P20 P30 Disk size 128 GiB 512 GiB 1024 GiB (1 TB) IOPS per disk 500 2300 5000 Throughput per disk 100 MB per second 150 MB per second 200 MB per second
- 73. How many storage accounts?
- 74. Azure storage types Locally Redundant Storage (LRS) Zone Redundant Storage (ZRS) Geographically Redundant Storage (GRS) Read-Access Geographically Redundant Storage (RA-GRS) How it works Makes multiple synchronous copies of your data within a single datacenter Stores three copies of data across multiple datacenters within or across regions. For block blobs only Same as LRS, plus multiple asynchronous copies to a second datacenter hundreds of miles away Same as GRS, plus read access to the secondary datacenter Total copies 3 3 6 6 Why use it For economical local storage or data governance compliance An economical, higher durability option for block blob storage For protection against a major datacenter outage or disaster Provides read access to data during an outage, for maximum data availability and durability Availability SLA 99.9% read/write 99.9% read/write 99.9% read/write 99.9% write 99.99% read https://azure.microsoft.com/en-us/pricing/details/storage/
- 75. Temporary drive guidance http://blogs.technet.com/b/dataplatforminsider/archive/2014/ 09/25/using-ssds-in-azure-vms-to-store-sql-server-tempdb- and-buffer-pool-extensions.aspx Azure virtual machine C: OS disk E:,F:, etc. data disks D: temporary disk Disk cache
- 76. Cores VM sizes Temp disk size (GB) Max IOPS Max read (MB/s) Max write (MB/s) 1 Standard_D1 50 3,000 48 24 2 Standard_D2 Standard_D11 100 6,000 96 48 4 Standard_D3 Standard_D12 200 12,000 192 96 8 Standard_D4 Standard_D13 400 24,000 384 192 16 Standard_D14 800 48,000 768 384 http://azure.microsoft.com/blog/2014/10/06/d-series-performance-expectations/
- 77. Object Limit Locking Subscription 120 create/add operations in 5 minute window N/A Cloud service 200 per subscription ~3 minutes per update Virtual machine 50 per cloud service 2,048 per virtual network None Virtual network 100 per subscription Single modification API Storage account 100 per subscription None Storage container No limit None Storage blob 40 per storage account One blob per container per storage account at a time http://azure.microsoft.com/en-us/documentation/articles/azure-subscription-service-limits/
- 79. Iometer
- 80. Creating a Virtual Machine
- 81. Standard Windows OS Linux Distributions Database Images And More
- 82. Launch MSDN specific images 33% to 99% savings
- 83. Wide Range of Certified for Azure Images Available via Azure Preview Portal only at this time
- 85. Lap Around Virtual Machines
- 89. Virtual Network VPN GW Frontend 10.1/16 Mid-tier 10.2/16 Backend 10.3/16 Internet On Premises 10.0/16 VPN & ExpressRoute Azure Direct Internet Connectivity
- 90. Virtual Network Backend 10.3/16 Mid-tier 10.2/16 Frontend 10.1/16 VPN GW Internet On Premises 10.0/16 ExpressRoute and VPNs
- 91. Secure site-to-site VPN connectivity • SMB, Enterprises • Connect to Azure compute Secure point-to-site connectivity • Developers • POC Efforts • Small scale deployments • Connect from anywhere ExpressRoute private connectivity • SMB & Enterprises • Mission critical workloads • Backup/DR, media, HPC • Connect to all Azure services Internet Connectivity • Consumers • Access over public IP • DNS resolution • Connect from anywhere
- 92. Update Domains are honored by host OS updates
- 93. • Visual Studio debuggers • Diagnostics agents • Monitoring agents • Access recovery • Docker extension • Backup helper
- 94. Functionality Details Azure CLI support for easy Docker host creation azure vm docker create -l <location> <vm-name> <image- name> <username> <password> Azure Portal experience • Docker on Ubuntu image • Easy to deploy popular DockerHub images Docker CLI (machine, compose, swarm) support Already supported for Linux containers on Azure Docker optimized OS distributions CoreOS, Ubuntu “Snappy” (future), RancherOS (future) Windows Server 10, Windows Server “Nano” (future) Visual Studio Integration Support for Linux and Windows Server containers Docker Trusted Repository Available in Marketplace (BYOL) Container services Coming soon
- 95. Resource Group Subnet Scalable Storage V M VNET Scalable NIC … V M V M V M Scale Set Extensions
- 98. Resource groups
- 99. What is RBAC •Allows secure access with granular permissions to resources •Assignable to users, groups or service principals •Built-in roles make it easy to get started Role Definitions • Describes the set of permissions (e.g. read actions) • Can be used in multiple assignments Role Assignments • Associate role definitions with an identity (e.g. user/group) at a scope (e.g. resource group) • Always inherited – subscription assignments apply to all resources
- 103. The complete disaster recovery solution OMS Any cloud Any OS App aware Cloud on-ramp Power of Azure Part of a broader cost effective management story VMware, Hyper-V, Physical, AWS* DR to Azure DR to alternate site Windows Linux SharePoint | SQL Server | Exchange | SAP | Oracle | and more… Disaster Recovery | Migration | Dev/Test Hyper-Scale | Enterprise Grade | Hybrid | Agile
- 104. ASR: Multiple scenarios, one solution Disaster Recovery | Migration | Dev/Test OMS Any cloud Any OS App aware Cloud on-ramp Power of Azure Part of a broader cost effective management story VMware, Hyper-V, Physical, AWS* DR to Azure DR to alternate site Windows Linux SharePoint | SQL Server | Exchange | SAP | Oracle | and more… Hyper-Scale | Enterprise Grade | Hybrid | Agile
- 105. Azure Site Recovery use cases Disaster recovery Single click application recovery Compliance assurance without impacting production Disaster avoidance—hurricane warning Failover during real disasters—fire, earthquake, etc. Migration No impact on production during replication—just minutes of downtime during cutover Test before migration using Test Failover Free migration Dev/Test environment Using Test Failover get an identical copy of your production environment Use this for testing different scenarios like Patch Tuesday, new release testing Deploy new patches/bits to production with confidence
- 107. Branch office to Azure
- 108. Safeguard your customer’s applications On-premises to on-premises protection with Azure Site Recovery
- 109. View step-by-step guidance QUICK START 2 A group for servers to represent site or branch CREATE SITE 3 Register Hyper-V Server REGISTER 4 Define protection policy CONFIGURE PROTECTION 5 6 Replicate disks to Azure PROTECT VIRTUAL MACHINES 8 Test the deployment RUN DR DRILL Customer selects recovery region CREATE VAULT 1 Define DR Plan CREATE RECOVERY PLAN 7 Process
- 110. POC requirements (1 Host) One Hyper-V 2012 R2 Host Connectivity to Azure from Host either direct or through proxy One Azure account Every ASR Instance you protect is free for 31 days
- 112. Safeguard your customer’s applications On-premises to Microsoft Azure protection with Azure Site Recovery
- 113. DR to Azure—for VMware VMs and Physical servers CUSTOMER1CUSTOMER2
- 114. Process
- 115. POC requirements On-premises vCenter managed VMs or physical servers to be protected Virtual or physical server for process server Connectivity to Azure Azure One Azure account Every ASR Instance you protect is free for 31 days A3 VM for Configuration Server A4 VM for Master Target Server Windows sources need Windows Master Target Server(s) and Linux sources need Linux Master Target Server(s)
- 117. Identity as the control plane Simple connection Self-service Single sign-on On-premises CloudMicrosoft Azure AD
- 118. What is Azure Active Directory? A comprehensive identity and access management cloud solution It combines directory services, advanced identity governance, application access management and a rich standards-based platform for developers
- 119. Your directory on the cloud (PowerShell/SQL (ODBC/LDAP v3 /Web services (SOAP, JAVA, REST) Azure Active Directory Connect and Connect Health
- 120. Azure Active Directory Connect • Consolidated deployment assistant for your identity bridge components • All currently available sync engines will be replaced by the sync engine included in the Connect tool • Assisted deployment of ADFS is available through Azure Active Directory Connect • ADFS is an optional component for authentication in hybrid implementation • Password sync can replace ADFS for more scenarios Making hybrid identity simple
- 121. Delivering a seamless user authentication experience Identity synchronization with password (hash) sync User attributes are synchronized using identity synchronization services including a password hash, authentication is completed against Azure Active Directory User attributes are synchronized using identity synchronization tools, authentication is passed back through federation and completed against Windows Server Active Directory
- 122. Your directory on the cloud Connect and sync on-premises directories with Azure 2400+ pre-integrated popular SaaS apps SaaS apps
- 123. Pre-integrated SaaS apps in the application gallery Microsoft Bing Ads By Microsoft Corp Microsoft Developer Network (MSDN) By Microsoft Corp Microsoft OneDrive By Microsoft Corp Office 365 Exchange By Microsoft Corp Dynamics CRM By Microsoft Corp Microsoft Account (Windows Live) By Microsoft Corp Skype By Microsoft Corp Yammer By Microsoft Corp ServiceNow By ServiceNow Box By Box Salesforce By Salesforce.com Citrix GoToMeeting By Citrix NASDAQ Online By the NASDAQ CMX Group, Inc. SAPBusinessObjectivesBI OnDemand By SAP Concur By Concur Concur Tripit By Tripit DocuSign By DocuSign, Inc. Red Hat OpenShift By Red Hat, Inc. Egnyte By Egnyte, Inc. Evernote By Evernote Corp. MarcomCentral By PTI Marketing Tech McKesson InterQual Online Learning By McKesson Oracle SRM By Oracle Corp. Oracle Taleo By Oracle Corp. ClearDB By SuccessBricks, Inc. SuccessFactors By SuccessFactors, Inc. a SAP company American Express OPEN Small Business By American Express IBM Kenexa By IBM Corp. IBM SmartCloud for Social Business By IBM Corp Workday By Workday Blogger By Google Google By Google Google app Engine By Google DreamBox Learning By DreamBox Learning Dropbox for Business By Dropbox Facebook By Facebook AT&T Business Direct By AT&T Twitter By Twitter Amazon Web Services By Amazon Netflix By Netflix. Inc.
- 124. Reveal shadow IT: Discover all SaaS apps in use within your organization Microsoft Azure Active Directory Cloud App Discovery
- 125. Azure SQL Server
- 126. Built for SaaS and Enterprise applications Predictable performance & Pricing Elastic database pool for unpredictable SaaS workloads 99.99% availability built-in Geo-replication and restore services for data protection Secure and compliant for your sensitive data Fully compatible with SQL Server 2014 databases Azure SQL Database Fully managed database-as-a-service built on SQL with near zero administration
- 127. SQL Database Service Tiers
- 129. Better support for large databases Table partitioning + parallel queries Online + large index rebuild No transaction size limit Expanded programming surface area CLR, full-text search, change tracking, heaps, analytics… Deeper database insights Full set of dynamic management views (DMV) Better premium performance In-memory Columnstore SSD based IO Azure SQL Database V12 SQL DB V12
- 130. Database performance and throughput Compute Writes Reads Memory
- 132. Share resources dynamically among databases on the same server Customer-managed over-provisioning makes pools cost-effective for unpredictable, sporadic workloads Well-matched to many database-per-tenant SaaS workloads Basic, Standard, and Premium tiers Databases can burst to the same level as isolated DBs in the same tier Pool size is scaled to support aggregate workload Elastic database pools Max per-database burst level
- 134. Security & Management Web Apps Mobile Apps API Management API Apps Logic Apps Notification Hubs Content Delivery Network (CDN) Media Services HDInsight Machine Learning Stream Analytics Data Factory Event Hubs Mobile Engagement Active Directory Multi-Factor Authentication Portal Key Vault Biztalk Services Hybrid Connections Service Bus Storage Queues Store / Marketplace Hybrid Operations StorSimple Import/Export SQL Database DocumentDB Redis Cache Search Tables SQL Data Warehouse Azure AD Connect Health AD Privileged Identity Mngt Cloud Services Batch Remote App Service Fabric Visual Studio Application Insights Azure SDK Team Project VM Image Gallery & VM Depot Automation Backup Site Recovery Operational Insights Microsoft Operation Management Suite
- 135. ``` Log Analytics Automation Backup DR and Data Protection Security Microsoft Operation Management Suite Simplified Management. Any Cloud, Any OS.
- 136. Azure Customer Benefits recover VMs to previous state troubleshoot across resources Virtual Machines Web & Worker Roles Docker containers Service Fabric Virtual Networks SQL Database automate manual tasks continually enforce VM configuration cross subscription visibility ensure business continuity understand security threats map app and network topologies migrate VMs with low downtime Visibility across Azure and on-premises Log Analytics Automation Backup DR and Data Protection Security Microsoft Operation Management Suite
- 139. DMZ APP DB
- 141. Depends on LB IP address Load Balancer VNet Subnet VM IP address NICVM Storage account Disk (blob)
- 142. ARM templates can: • Simplify deployment • Simplify roll-back • Provide cross-resource configuration and update support • Be used as a learning tool to build to suit Azure templates are: • Source file, checked-in • Specifies resources and dependencies (VMs, websites, DBs) and connections (configuration, LB sets) • Configurable parameters for input/output Azure Resource Manager templates DEPENDS ON SQLDepends on SQL SQL-A website [SQL CONFIG] VM (2x) ARM template SQL-A DB Website Virtual machines Depends on SQL SQL configuration
- 146. Passing state—common parameters Name (string values) Description Location The location where the resources will be deployed from a constrained list of Azure regions storageAccountNamePrefix Unique DNS name for the storage account where the VM’s disks will be placed virtualNetworkName For deployments that create a new virtual network, the name to use for creating that resource. For deployments that use an existing virtual network, the name of the VNet to deploy into username User name for the virtual machine(s) and potentially the application(s). More than one user name can be requested from the end user, but at least one must be prompted password Password for the virtual machine(s) and potentially the application(s). More than one password can be requested from the end user for different VMs or applications, but at least one must be prompted tshirtSize The named scale unit size to provision from a constrained list of offered t-shirt sizes For example, “Small”, “Medium”, “Large” enableJumpbox Parameter that identifies whether to enable a jumpbox for the environment values: “enabled”, “disabled”