Connect your datacenter to Microsoft Azure
Download as PPTX, PDF1 like3,836 views
This document provides an overview of hybrid cloud scenarios using Microsoft Azure. It discusses using Azure to extend infrastructure to the cloud, processing data in the cloud, and accessing data and applications across cloud and on-premises. It provides examples of hybrid scenarios for infrastructure as a service, platform as a service, development/test, backup/recovery, and enterprise mobility. It also discusses networking options and enhancements for hybrid configurations including virtual networks, gateways, and security groups.
Ad
More Related Content
What's hot (13)
Viewers also liked (20)
Ad
Similar to Connect your datacenter to Microsoft Azure (20)
Ad
More from K.Mohamed Faizal (20)
Recently uploaded (20)
Connect your datacenter to Microsoft Azure
- 1. Welcome to Cloud Era
- 2. DATA CENTER CONNECT YOUR HOME LAB TO MICROSOFT AZURE MOHAMED FAIZAL AND MATT HITCHCOCK
- 3. ABOUT US Mohamed Faizal Matt Hitchcock PowerShell MVP Microsoft Azure MVP Community Leader for Community Leader for
- 4. Thank you to our sponsors
- 6. HYBRID SCENARIOS Extend Infrastructure to the cloud Data Processing in the cloud Access data & apps in your data center Integrate services from On-Premises Processing across cloud & On-Premise
- 7. WHY HYBRID CLOUD? Your IT can benefit from public cloud • Pay-per-use, scalability, elasticity You cannot move all to a public cloud • Existing investments, legal constraints etc. Hybrid = best of both • Run in public cloud and your own data center
- 8. A Unified Cloud Strategy • flexible development • unified management Management PPoorrttaall//AAPPII • common identity • integrated virtualization Compute/storage/network Compute/storage/network • complete data platform
- 9. NETWORKING & AUTOMATION SERVICES COMPUTE SERVICES DATA SERVICES APP SERVICES * Not meant to be a comprehensive list of all services, for a complete list please visit azure.microsoft.com SO WHAT IS HYBRID … NETWORKING, COMPUTE, STORAGE, APP SERVICES, AUTOMATION, DISASTER RECOVERY, DEV, TEST, UAT, etc. … as a SERVICE On Premises Private Cloud Health Monitoring Automation Site-to-Site VPN Point-to-Site VPN Express Route Azure Web Site web roles worker roles Virtual Machines Azure Mobile Services TFS or VS Online + GIT Azure AD Multi-Factor Auth Azure Cache Access Control BizTalk Services Media Services Service Bus Notification Hub Scheduler Commercial Server Group #1 Server Group #2 SAN Storage Spaces/SMB VIRTUALIZATION COMPUTE, STORAGE & NETWORKING Physical Infrastructure (Servers/Storage/Networking DEVICES & FACILITIES StorSimple Cloud Integrated Storage Azure Site Recovery StorSimple Virtual Appliance Backup Service Gallery OS images VHD VHD data disk MySQL database SQL Database SQL Data Sync HDInsight (Hadoop) storage queue storage blob storage table Virtual network Availability Automation CDN Set Azure load balancer Auto-scale Traffic Manager Active Exchange File Server Directory LOB App My SQL Oracle App SQL APPLICATIONS & SERVICES JEE App .NET App System Center 2012 R2 Provisioning Monitoring Automation & Self Service Application Insight IT Service Management
- 10. HYBRID NETWORKING OFFERINGS Secure point-to-site connectivity • Developers • POC Efforts • Small scale deployments • Connect from anywhere Secure site-to-site VPN connectivity • SMB, Enterprises • Connect to Azure compute ExpressRoute private connectivity • SMB & Enterprises • Mission critical workloads • Backup/DR, media, HPC • Connect to all Azure services
- 11. HYBRID CLOUD SCENARIOS Infrastructure as a Service (3-Tier highly available example) Availability Set Load Balancing Auto Scaling Tier 1 Tier 2 Availability Set Auto Scaling SharePoint Tier 3 Availability Set Azure Storage SQL Azure Analytics & Reporting VPN VPN Web Site Mobile Service HDInsight (Hadoop) Virtual Machines VHD Storage BLOB Storage Table Storage Queue Windows Azure Cache Windows Azure CDN Microsoft Azure AD Notification Hub Microsoft Azure SDK Developers Users On Premises Microsoft Azure
- 12. HYBRID CLOUD SCENARIOS Platform as a Service (Connected Devices) Connected Devices Collect / Decode Load Balancing Auto Scaling Worker Roles INGRESS NODES ANALYTICS NODE Filter / Analyze / Aggregate Record Reporting / BI Auto Scaling Worker Roles Azure Storage CONSUME Azure Storage SQL Azure Analytics & Reporting Microsoft Azure
- 13. HYBRID CLOUD SCENARIOS Development / Test (SharePoint) VPN Remote Users Admin
- 14. HYBRID CLOUD SCENARIOS Azure Backup SQL File Server Exchange Encrypted Backup VPN Recovery Windows Backup SC Data Protection Manager Microsoft Azure Azure Site Recovery Site A Replication Site A Site B Hyper-V System Center Virtual Machine Manager Recovery plan Health Monitor System Center Virtual Machine Manager Replica Orchestrated Recovery in case of outage Manage Site B System Center Virtual Machine Manager Recovery Microsoft Azure Microsoft Azure
- 15. HYBRID CLOUD SCENARIOS Enterprise Mobility Suite • Hybrid Identity Management • Mobile Device Security& Management • Mobile Application Management • Strong Authentication & Access based Information Protection Microsoft Azure Active Directory Consumer identity providers PCs and devices Microsoft apps Custom ISV/CSV apps LOB apps 3rd party clouds/hosting Encrypted Synchronization Microsoft Azure AD Microsoft Azure Multi-Factor Authentication Multi-Factor ADFS / SAML Authentication Server Cloud Apps Multi-Factor Authentication Server Corporate devices On Premises Applications BYOD / Personal devices .NET, Java, PHP, … • Built-in • SDK for integration • Strong multi Factor Authentication • Real Time Fraud Alert • Reporting, Logging & Auditing • Enables compliance with NIST 800-63 Level 3, HIPAA, PCI DSS, and other regulatory requirements Microsoft Azure AD
- 16. SQL SERVER HYBRID CLOUD SCENARIOS SQL Development Publish Compare Sync Import / Export Register / Unregister Management Portal VPN Dispersed Teams Microsoft Azure SQL Backup/Recovery SQL Backup tool for legacy Manual Console Backup Managed Backups Management Portal VPN / Encrypted Data Microsoft Azure SQL Business Continuity Primary Asynchronous Commit Secondary VPN Console 2014 / Scripts 2012 Backup Availability Groups Periodic Snapshots Geo Replication Disaster Recovery Powering BI Apps Microsoft Azure
- 17. SAP on Microsoft Azure On-Premises VPN Device SAP (Dev / Test / UAT) Windows Server & SAP (C:) Shared Pool (D:) Windows Server (C:) Shared Pool (D:) SQL Server (E:) .vhd file .vhd file .vhd file .vhd file .vhd file SQL Server Virtual Network Blob Storage On-Premises On-Premises Servers SAP certifications Microsoft Azure is certified for the following SAP products, with full support from Microsoft and SAP. http://azure.microsoft.com/en-us/campaigns/sap/ SAP Product Guest Operating System RDBMS Virtual Machine Types SAP Business Suite Software Windows SQL Server A5 SAP Business All-in-One Windows SQL Server A5 SAP NetWeaver Application Server ABAP 1 Windows SQL Server A5 SAP HANA Developer Edition (including the HANA Client software comprised of SQLDBC, ODBO (Windows only), ODBC, AND JDBC drivers), HANA Studio, and HANA Database) 2 SUSE, Linux N/A A7, A8 Azure VPN Gateway 1 Only NetWeaver 7.00 and later SAP releases of NetWeaver are supported for deployment in Azure. 2 Customers can try SAP HANA Developer Edition on Azure using the SAP Cloud Appliance Library.
- 18. THE BIG (NETWORK) PICTURE Internet Clients Azure Virtual Network On premises Datacenter Frontend Connectivity Load-balanced and direct IPs ACLs & DDoS protection Traffic Manager & Azure DNS Virtual Networks Flexible multi-tier topologies Backend Connectivity Secure Internet cross premises VPN connectivity ExpressRoute – direct connectivity
- 19. FORCED TUNNELING “Force” or redirect customer Internet-bound traffic to an on-premises site Auditing & inspecting outbound traffic from Azure Needed by many scenarios for critical security and IT policy requirements Backend 10.3/16 Mid-tier 10.2/16 Virtual Network Frontend 10.1/16 VPN GW Internet On Premises S2S VPNs Forced Tunneled via S2S VPN Internet
- 20. GATEWAY ENHANCEMENTS High Performance Gateway • Better throughput • More S2S tunnels • Pricing • $0.49 per gateway hour • Data transfer & VNet traffic rates unchanged No Encryption option • Better throughput for Vnet-to-Vnet within Azure • Intra-/Inter-region Vnet-to-Vnet traffic stays within Microsoft networks, not Internet PFS Support for IKE • Compliance requirements & better security Operations Logs • Visibility into critical gateway events Gateway SKU ExpressRoute Throughput* S2S Throughput* Max Tunnels Default 500 Mbps 100 Mbps 10 Performance 1000 Mbps 200 Mbps 30
- 21. ENnaEbTlWesO nReKtw SoErCkU RITY GROUPS (NSG) segmentation & DMZ scenarios Access Control List • Filter conditions with allow/deny • Individual addresses, address prefixes, wildcards Associate with VMs or subnets ACLs can be updated independent of VMs Backend 10.3/16 Mid-tier 10.2/16 Virtual Network Frontend 10.1/16 VPN GW Internet On Premises 10.0/16 S2S VPNs Internet
- 22. MULTIPLE NICS IN AZURE VMS Multiple NICs enable virtual appliances in Azure MAC/IP addresses persist through VM life cycle Separate frontend-backend traffic, and management-data planes Up to 4 NICs per VM Azure Virtual Machine NIC2 NIC1 Default Internet 10.2.3.33 10.2.2.22 10.2.1.11 VIP: 133.44.55.66
- 23. CUSTOMERS WANT AZURE ON THEIR NETWORK WAN WAN
- 24. EXPRESSROUTE PARTNERS Public internet Microsoft Azure Microsoft Azure Public internet
- 25. FOR MORE INFORMATION • Introduction to Microsoft Azure Networking Technologies and What's New • Designing Hybrid Scenarios with Microsoft Azure • Architecting Effective Cloud Adoption Strategies • How to Develop a Successful Hybrid Cloud Strategy
- 26. EVALUATE THIS SESSION Win… There will be other prizes including Bluetooth devices, Office 365 subscriptions, Xbox Live subscriptions and more!