Microsoft Ignite NZ 25-28 October 2016 SKYCITY, Auckland

Designing for Availability in Azure M390 Lloyd Lim

Agenda Highly Available PaaS in Azure Highly Available IaaS in Azure 11/10/2018 5:27 PM Agenda Highly Available PaaS in Azure Traffic Manager SQL Azure Web Apps Highly Available IaaS in Azure IaaS VMs SQL VMs VM Scale Sets Storage Accounts Highly Available Hybrid in Azure Hybrid Connections Application Proxies ExpressRoute Networks VPNs © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Define RPO and RTO needed (sample) 11/10/2018 5:27 PM Define RPO and RTO needed (sample) Level of Resilience RTO RPO Single hardware item failure, Single Service Failure, Single VM Failure RTO within 5 mins Zero Single Network link failure RTO within 1 min Single Datacentre/site failure RTO within 8 hours 5 mins Business Continuity (all business processes available) 24 hours Note difference between Technical and Business RPOs/RTOs © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Define costs too! (sample for CxOs) 11/10/2018 5:27 PM Define costs too! (sample for CxOs) Level of Resilience RTO RPO Cost Single hardware item failure RTO within 5 mins Zero 5 mins $1,000,000 $100,000 Single Network link failure RTO within 1 min Single Datacentre/site failure RTO within 8 hours 8 hours Business Continuity (all business processes available) 24 hours © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

And this is what they all want!  11/10/2018 5:27 PM And this is what they all want!  Level of Resilience RTO RPO Cost Single hardware item failure Never fails Zero $0 Single Network link failure Single Datacentre/site failure Business Continuity (all business processes available) © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

PaaS HA Microsoft Ignite 2016 11/10/2018 5:27 PM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Traffic Manager HA Performance Weighted Round Robin Failover *Only probes http(s) – You need to add checks for other components in your probe page

Demo Lloyd Lim Microsoft Ignite 2016 11/10/2018 5:27 PM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

SQL Azure HA Determine RPO and RTO needed Capability Basic tier Microsoft Ignite 2016 11/10/2018 5:27 PM SQL Azure HA Determine RPO and RTO needed Capability Basic tier Standard tier Premium tier Point in Time Restore from backup Any restore point within 7 days Any restore point within 35 days Geo-Restore from geo-replicated backups ERT < 12h, RPO < 1h Active Geo-Replication ERT < 30s, RPO < 5s * ERT (Estimated Recovery Time) © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Lloyd Lim Microsoft Ignite 2016 11/10/2018 5:27 PM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Web Apps HA Azure Load Balancers Stateless Fast deploy 11/10/2018 5:27 PM Web Apps HA Azure Load Balancers Layer 4 Load Balancer Layer 7 Load Balancer Stateless Make your front end stateless Fast deploy Keep “Recipe” for deployment – no need to backup if faster than restore © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Lloyd Lim Microsoft Ignite 2016 11/10/2018 5:27 PM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IaaS HA Fault Domains Availability Sets Replication Azure VMs restart 11/10/2018 5:27 PM IaaS HA Fault Domains Designing with fault and update domains Availability Sets Ensuring that all VMs be in AV sets Replication Data replication is your responsibility Azure VMs restart Azure in-place virtual machine migration eliminates virtual machine reboots during critical security updates for Host OS © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Lloyd Lim Microsoft Ignite 2016 11/10/2018 5:27 PM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

SQL VMs AlwaysOn Windows 2016 Cluster Heartbeat Applications 11/10/2018 5:27 PM SQL VMs AlwaysOn Sync replication within Datacenter, Async between Datacenters Windows 2016 Storage Replicas and DTC across instances, Storage Spaces Direct Cluster Heartbeat VMs can be paused up to 30s. Applications Make sure they are reconnecting on failure © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Lloyd Lim Microsoft Ignite 2016 11/10/2018 5:27 PM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

VM Scale Sets HA within itself DSC NAT Rules Applications 11/10/2018 5:27 PM VM Scale Sets HA within itself Azure creates and removes VMs as needed – from a Base VHD DSC Use Desired State Configuration to enforce each VM’s configuration NAT Rules NAT rules get updated automatically Applications Hopefully stateless, else issues when VM is removed. © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Lloyd Lim Microsoft Ignite 2016 11/10/2018 5:27 PM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Storage Accounts HA 3 copies of each data Geo Redundant 11/10/2018 5:27 PM Storage Accounts HA 3 copies of each data Storage accounts are locally redundant (and geo-redundant if you want) Geo Redundant No RTO for geo redundant – use other methods like SQL Server AlwaysOn if you need specific RTO RAID/Storage Spaces Only use Locally Redundant storage for VMs with RAID/StorageSpaces/StorageSpacesDirect © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Hybrid HA Hybrid Connections Azure AD Application Proxy VPN Gateways 11/10/2018 5:27 PM Hybrid HA Hybrid Connections Create 2 instances of the hybrid connection services on premises Azure AD Application Proxy Create 2 instances of the proxy services on premises VPN Gateways Azure VPN Gateways have SLA of 99.9% (Basic), 99.95% (Standard or High Performance) Expressroute Gateways Each Express Route circuit has a redundant pair of cross connections configured to provide high availability. Not Immune to Misconfiguration! If you misconfigure your own network – sorry! © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/10/2018 5:27 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.