1. Windows Azure IaaS – Deep Dive
Shyam Narayan
Premier Field Engineer
Microsoft

2. Agenda
Introduction to IaaS
Core IaaS Concepts
Deploying SharePoint on IaaS

3. Introduction to IaaS

4. Windows Azure Virtual Machines
IT Pro experience
Support for key server applications
Easy storage manageability and mobility
High availability features
Advanced networking
Integration with compute PaaS
If it requires a developer, it’s not IaaS

5. Core IaaS Concepts

6. Virtual Machines and Cloud Services

7. Cloud Services, Roles and Instances
Cloud Service is a management, configuration, security, networking and service model boundary
Cloud Service
Worker Role
Web Role
VM1
VM2
VM3
VM4
VM5
VM…
ROLES
INSTANCES

8. Implicit Cloud Service
Virtual Machines
Virtual Machines are roles with exactly one instance
Implicit Cloud Service
Virtual Machine VM

9. Cloud Services with Virtual Machines
Multiple Virtual Machines can be hosted within the same cloud service
Cloud Service
Virtual Machine
Virtual Machine VM VM

10. Virtual Machine Images and Disks

11. Images and Disks Microsoft Partner User OS Disks Data Disks OS Images
Base OS image for new Virtual Machines
Sys-Prepped/Generalized/Read Only
Created by uploading or by capture
Disks
OS Disks
Data Disks
Writable Disks for Virtual Machines
Created during VM creation or during upload of existing VHDs.

12. Each Persistent Data Disk Can be up to 1 TB
Virtual Machine Sizes
VM Size
CPU Cores
Memory
# Data Disks
IOPS
Extra Small
Shared
768 MB 1
500
Small
1.75 GB 2
2 x 500
Medium
3.5 GB 4
4 x 500
Large
7 GB 8
8 x 500
Extra Large
14 GB 16
16 x 500 A6
28 GB A7
56 GB
Each Persistent Data Disk Can be up to 1 TB

13. Modify using Set-AzureOSDisk or Set-AzureDataDisk
Disk Caching
Disk Type
Default
Supported
OS Disk
Read Write
Read Only and Read Write
Data Disk
None
None, Read Only and Read Write
Modify using Set-AzureOSDisk or Set-AzureDataDisk

14. Disk Storage
Images and disks are stored as Windows Azure Storage Blobs
Data is triplicated
All existing storage tools just work
Windows Azure Storage

15. Virtual Machine Availability

16. Service Level Agreements
99.95% for multiple role instances
4.38 hours of downtime per year
99.9% for single role instances
8.75 hours of downtime per year
What’s included
Compute Hardware failure (disk, CPU, memory)
Datacenter failures - Network failure, power failure
Hardware upgrades, Software maintenance – Host OS Updates
What is not included
VM Container crashes, Guest OS Updates

17. How Does this Relate to SLA?
Availability set
Virtual Machine
Virtual Machine
Virtual Machine
SQL Server
SQL Server
Primary
SQL Server
Secondary
No SLA
SLA 99.95

18. Fault and Update Domains
Fault Domains
Represent groups of resources anticipated to fail together
i.e. Same rack, same server
Fabric spreads instances across fault at least 2 fault domains
Update Domains
Represents groups of resources that will be updated together
Host OS updates honour service update domains
Specified in service definition
Default of 5 (up to 20)
Fabric spreads role instances across Update Domains and Fault Domains

19. High availability features
Physical Machines
Power Unit
Rack Switch

20. High availability features
TechEd 2013
3/31/ :50 PM
High availability features
Load Balancer
Load-Balanced Set
Physical Machines
Power Unit
Rack Switch
VM1
VM2
VM2
VM1
Availability Set
Availability SLA: 99.95%
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Virtual Machine Availability Sets
Update Domains are honored by host OS updates
Fault Domain
Fault Domain
Rack
Rack
Availability Set
Virtual Machine
Virtual Machine
IIS1
IIS2
UD #2
UD #1
Availability Set
Virtual Machine
Virtual Machine
SQL1
SQL2
UD #1
UD #2

22. Windows Azure Networking

23. Azure Networking Full control over machine names
Windows Azure provided DNS
Resolves VMs by name within the same cloud service
Machine names are modeled explicitly and registered in the DNS service
Bring your own DNS server
Use your on-premise DNS servers
Deploy a DNS server in Windows Azure
Use public DNS services

24. Protocols and Endpoints
UDP Traffic Supported in WA
Load-balanced incoming traffic and allows outbound traffic
Support for All IP-Based Protocols (VM to VM)
Instance-to-instance communication
TCP, UDP and ICMP, dynamic ports
Port Forwarded Endpoints
Direct communication to multiple VMs in the same cloud app
Custom Load Balancer Health Probes
Health check with probe timeouts
HTTP based probing, allowing granular control of health checks

25. Port Forwarding Input Endpoints
Public Port
Local Port
Protocol (TCP/UDP)
Name
Cloud App/Hosted Service
VM1
PORT 5586
PORT 3389
LB/IP
VM2
PORT 5587
PORT 3389
Single Public IP Per Cloud Service

26. Load Balanced Sets LB Endpoint Set Public Port Local Port
Protocol (TCP/UDP)
Name
Cloud App
VM1
LBHTTP
PORT 80 LB
VM2
LBHTTP
VM3
LBHTTP

27. Virtual Networks – Site-to-Site
Build 2012
3/31/2017
Virtual Networks – Site-to-Site
Windows Azure
Virtual Network
<subnet 1>
<subnet 2>
<subnet 3>
DNS Server
Site-to-Site VPN
On-premises
WA Gateway
Hardware VPN or Windows RRAS
Your datacenter
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

28. Virtual Networks – Point-to-Site
Build 2012
3/31/2017
Virtual Networks – Point-to-Site
Windows Azure
Virtual Network
<subnet 1>
<subnet 2>
<subnet 3>
DNS Server
Site-to-Site VPN
On-premises
WA Gateway
Hardware VPN or Windows RRAS
Your datacenter
Point-to-Site VPN
Individual computers behind corporate firewall
Remote workers
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Deploying SharePoint

30. SharePoint Farm Configuration
WFE
AppSvr
SQL LB
AD/DC/DNS
WFE 1
APP 1
SQL 1
AD 1
AD 2
AD 1
WFE 2
APP 2
SQL 2
Cloud Svc
80/443
WFE 3
DATA
APPS
VPN Tunnel
On-prem Network
Cloud Svc
Virtual Network
2013
Azure
On-prem

31. Web Front End Tier

32. App Server Tier

33. Data Server Tier

34. SharePoint 2013 Automation Scripts
PowerShell Scripts that use Remote PowerShell for automated deployment of Active Directory, SQL Server and SharePoint 2013.
Two Sample Configurations Available
Highly Available and Single VMs
Download from GitHub

35. Recap
Overview of core concepts – VM, Storage, networking and availability
SharePoint on IaaS

36. Q and A