Windows Azure for IT Pros Kurt CLAEYS (TSP Windows Azure, Microsoft EMEA)

“What IT pros need to know about Azure”

Abstract In this session we focus on Azure from an IT Pro point of view. We see how tasks of administrators are changing and what new responsibilities they have in ‘the Cloud’. Topics : - How to create a hybrid environment with Azure Connect where your application runs in the cloud but needs access to local resources like SQL Server or Exchange. - How to integrate cloud applications with your enterprise AD for authentication/authorization. - How to monitor health and performance of Azure application roles with SCOM and scale out more instances if needed. - What is the value of the Azure VM role and how to remote desktop into the Azure machines. In this session : no code, no Visual Studio (promised!) but Hyper-V,SCOM, AD, ipv6 ….

Agenda Azure overview Create a hybrid environment with Azure Virtual Network Federated authentication with AD / ADFSv2 / ACS Monitoring Azure roles with SCOM VMRole 4

Task & Responsibilties The cloud does not eliminate IT Pro tasks... new tasks and responsibilities are here : Support migrations by implementing a hybrid cloud environment. Implement federated identity scenarios accross enterprises. Support ‘dev/test on premises’ – ‘production in the cloud’ environments. Manage and monitor running applications. Scale out when needed.

infrastructure as a service (hardware) Servers available in the cloud platform as a service (developer) Delivery of a OS for custom, cloud enabled apps Support for service hosting and interoperability Relational data storage in the cloud software as a service (end users) = BPOS Exchange online Sharepoint online Dynamics CRM online PAASIAAS SAAS

PAAS

Create a hybrid environment with Azure Virtual Network Hybrid = Apps in Azure need to be able to communicate with on premises machines and vice versa. Virtual Network = enabling direct IP-based network connectivity between machines, abstracting where the machine are located. Scenarios : Connect to an on-premises SQL Server database Domain-join Windows Azure services to local Active Directory 9

Azure Virtual Network Web/WorkerVM Role On Premise Machine Azure Connect Gateway Network policy managed through portal : “which machine can access which machine” SQL Server IPV6 address opening https outbound on firewall is enough ! Corporate FIREWALL

DEMO Azure Virtual Network

Azure AppFabric Access Control Helps you build federated authorization into your applications and services. Declarative model of rules and claims. Supports different identity-management infrastructures. Bridges Active Directory identity stores on premises (ADFS v2) Services using Windows Identity Framework 12

Authentication – Authorization - Rules Azure ACS WebApp Facebook ID ADFS2 identity providers Redirect login

Federation of identities My WebApp contoso AD fabrikam AD ADFSv2 Claimset owned by contoso Claimset owned by fabrikam My Claimset

DEMO ADFS - ACS

VMROLE Ability to upload your own customized WS2008R2 Enterprise images. Full control over the OS image, install whatever you want on it. You can remote desktop into the OS. Target scenarios : Need to use apps/libraries with no unattended setup. Dev/Test on premises... Production on Azure. Scale out ! Instances are behind loadbalancer, one public IP per service. No durability of OS image on hardware failure. With VM Role, the customer creates & maintains the OS. Paying model = Paying model of current web/workerrole. Uses differencing disks to upload deltas to image. 16

virtual image app Azure virtual image app Azure app development environment Visual Studio virtual image app development environment Hyper-V Web/Worker Role The virtual image is already there,... you upload your app,... Azure places this app on the image and runs the image. VM Role You upload the complete virtual image with all apps installed,... Azure runs the image

+ Install W2008 R2

VMRole Lifecycle Create a.vhd in Hyper-V manager, install W2008 R2 as OS. Install whatever roles, features and apps you want on it. Turn of automatics updates. Install Windows Azure VM Role Integration Components. Run sysprep.exe and bring it down. Upload the.vhd to Azure (needs a certificate). Deploy a service configuration (Visual Studio, Managament Portal or Management API PS commandlets). 21

DEMO VMROLE

System Center Operation Manager - Azure Management pack enables Operations Manager customers to monitor the availability and performance of applications that are running on Windows Azure. Discovery of Windows Azure applications. Status of each role instance. Collection and monitoring performance information. Collection and monitoring of Windows events. Collection and monitoring of the.NET Framework trace messages from each role instance. Change the number of role instances. 23

DEMO SCOM + Azure management pack

Q&A

Speaker info: please do not delete the slides in this section Show these slides at the end of your session before going to Thank you page.

Stay up to date with TechNet Belux Register for our newsletters and stay up to date: Technical updates Event announcements and registration Top downloads Join us on Facebook LinkedIn: Download MSDN/TechNet Desktop Gadget

TechDays 2011 On-Demand Watch this session on-demand via TechNet Edge Download to your favorite MP3 or video player Get access to slides and recommended resources by the speakers

THANK YOU