1. Azure VM infrastructure innovation and automation
6/24/2018 4:52 PM
BRK3220
Azure VM infrastructure innovation and automation
Guy Bowerman @gbowerman
Kay Singh @singhkays
Azure Compute PM team
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Challenges of cloud workloads
6/24/2018 4:52 PM
Challenges of cloud workloads
Infrastructure – the right tool for the job
Availability – everything fails
Security – ubiquitous, simple, targeted
Managing at scale – exponential increase in complexity
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Agenda Infrastructure and Perf VM Availability Security
6/24/2018 4:52 PM
Agenda
Infrastructure and Perf
VM Availability
Security
Manageability and Monitoring
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. VM sizes at last Ignite L K M A D Av2 Dv2 F G H LOWEST PRICE
LARGEST SCALE-UP

5. VM Sizes added since last Ignite
Nov ‘16
Sep ‘17
Jul ‘17
Jul ‘17
Mar ‘17
Dec ‘16
Dec ‘16
Jul ‘17
Av2 B
Dv3
Ev3 L NC NV M A D
Av2
Dv2 F G
Av2 H
More memory per vCPU and SSD local disk
Burstable size for light and variable workloads
Improved value standard memory size
Improved value high memory size
Optimized for No-SQL, Databases
Optimized for GPU compute scenarios
Optimized for GPU visualization scenarios
Optimized for largest enterprise applications
LOWEST PRICE
LARGEST SCALE-UP
Doubling the compute offerings since last Ignite!

6. Most powerful and scalable cloud for SAP HANA
Overview
combination of VMs and purpose-built Large instances provides the largest scale and widest range for SAP HANA of any hyper scale cloud
Large Instances
RAM
Virtual Machines
CPU
On-demand infrastructure with M Series up to 3.8TB memory
Per-minute billing
SAP certified
Purpose-built infrastructure for SAP HANA
Single node supports up to 20TB for OLTP, and 60TB OLAP in scale-out mode
99.99% SLA (High availability) M G

7. Larger disk sizes Support up to 4TBs in size
Max 1TB
Max 4TB
Larger disk sizes Support up to 4TBs in size
Overview
Easier management for high capacity storage
Migrate workloads with larger disk size requirements
Allow easier usage with Azure Site Recovery

8. Small disk sizes New sizes for flexibility and cost savings
PREMIUM STORAGE ACCOUNT
25 MB/
second
50 MB/
Small disk sizes New sizes for flexibility and cost savings
Overview
Smaller disk sizes - 32 GB and 64GB
Single digit millisecond latency for most IO’s
Consistency of provisioned performance
Cost savings
NEW

9. Nested Virtualization Increasing the density of your infrastructure
Overview
Available on the new Dv3, Ev3 and M VM sizes
Create multiple environments for testing within a VM
Run Hyper-V containers
Test multi-machine scenarios without needing individual hardware

10. Accelerated networking Increased network performance up to 30 Gbps
GA – Windows
Public Preview - Linux
Accelerated networking Increased network performance up to 30 Gbps
Overview
Direct communication with the network interface card using Single Root IO Virtualization (SR-IOV) in Supported VMs
Significantly Reduced Latency
Reduced Jitter
Run the most performance-sensitive workloads on VMs and scale sets

11. Scaling Horizontally

12. Scaling out infrastructure Using scale sets for elastic scale
Overview
Scale - Deploy identical resources:
Easily
Rapidly
At scale.. 10s – 10,000s of cores
Customization – PaaS-like ease of use with custom infrastructure
Availability - Roll out updates without service interruption
Low cost – Centralized infrastructure management
Elasticity - Automatically scale to changing demand

13. Scale set model vs. VM model
VMSS Model
Scale set model strengths
Central model definition applied to all VMs
-> easy capacity change and autoscale
-> define once, apply everywhere
Central model challenges
-> VMs may require unique properties
- E.g. Public IP, attach/detach disks
Higher scale demands higher level manageability (e.g. central OS/patch/security management etc.
VM Model

14. Demo: scale set create 6/24/2018 4:52 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Network parity for scale sets VMs in scale sets with full feature set
Overview
Public IPv4 per VM​
Multi-IP address per NIC​
Multi-NIC per VM​
Accelerated networking​
Configurable DNS
IPv6 load balancer support preview
Vnet peering

16. Agenda Infrastructure and Perf VM Availability Security
6/24/2018 4:52 PM
Agenda
Infrastructure and Perf
VM Availability
Security
Manageability and Monitoring
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. 6/24/2018 4:52 PM
What are Managed Disks?
Managed by Azure
OS Disk VHD
Managed OS Disk
Data Disk VHD
Managed Data Disk
Managed Storage Accounts
Simple - Abstracts storage accounts from customers
Granular access control – Top level ARM resource, apply Azure RBAC
Storage account limits do not apply – Enables scaling free of storage account limitations
Secure – No public access to the underlying blob
Support VM level disk encryption – secure data at rest
Better Storage Resiliency - Prevents single points of failure due to storage
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Better Storage Resiliency with Managed Disks
VMs with unmanaged storage
FD0
FD1
FD2
VM Availability Set
Storage account 1
Storage account 2
Storage account 3
Storage FD0
VMs susceptible to single storage FD failures

19. Better Storage Resiliency with Managed Disks
VMs with unmanaged storage
VMs with managed disks VS
FD0
FD1
FD2
FD0
FD1
FD2
VM Availability Set
VM Availability Set
Managed Storage account 1
Managed Storage account 2
Managed Storage account 3
Storage account 1
Storage account 2
Storage account 3
Storage FD0
Storage FD0
Storage FD1
Storage FD2
VMs susceptible to single storage FD failures
Disks on separate storage FDs & aligned with VM FDs

20. Easy migration from unmanaged ARM VMs
< 5 minutes
Stop the VM
Run the conversion command using PowerShell/CLI
Automatic Reboot
Supported within same storage type
Standard unmanaged to Standard Managed
Premium unmanaged to Premium Managed
Unmanaged Disks in Storage accounts
Managed Disks

21. Easy upgrade from Standard to Premium
< 5 minutes
Stop the VM
Update to Premium capable VM size
Update storage type to Premium
Reboot

22. Demo: Managed Disks 6/24/2018 4:52 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Scaling out with Managed Disks
Overview
Managed disks means no more managing multiple storage accounts
Massive scale
Up to 1,000 VMs in a scale set
Up to 300 custom image VMs in a set
Parity with VMs
Define attached data drives in VM scale set model
What about attach/detach to individual VMs?

24. Demo: Attach/Detach disks
6/24/2018 4:52 PM
Demo: Attach/Detach disks
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Geography—Data Residency boundary
6/24/2018 4:52 PM
Public Preview
Availability Zones
Part of Azure’s native HA/DR solutions, providing protection from datacenter failure b
Geography—Data Residency boundary
Region
Region
Region 1
Region 2
Zone 1
Zone 2
Zone 3
Zone 1
Zone 2
Zone 3
Achieve full resiliency with Data Residency
Availability Zones and a paired region within the same data residency boundary provides high availability, disaster recovery, and backup.
Protect against entire datacenter loss
Each zone is physically separated with independent power, network, and cooling and logically separated through zone- isolated services.
Run mission-critical apps with 99.99% SLA at GA
High Availability supported with industry best SLA when VMs are running in two or more Availability Zones in the same region.
See this Session: BRK2086
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. Most Comprehensive Resiliency and Best SLA
6/24/2018 4:52 PM
Most Comprehensive Resiliency and Best SLA
INDUSTRY-LEADING HIGH AVAILABILITY SLA
INDUSTRY-LEADING DISASTER RECOVERY
INDUSTRY-ONLY
VM SLA
99.9%
VM SLA
99.95%
VM SLA
99.99% at GA
REGIONS 42
Region 1
Region 2
SINGLE VM
Protection with Premium Storage
AVAILABILITY SETS & SCALE SETS
Protection against failures within datacenters
AVAILABILITY ZONES
Protection from entire datacenter failures
REGION PAIRS
Protection from disaster with Data Residency compliance
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Availability Zones preview
Zone redundant Load Balancer
VNet
Assign VMs to specific zones
Zone redundant load balancer
Assign scale sets to specific zones
Zone-redundant load balancer preview
Public IP per VM
Up to 1,0000 VMs per VMSS VM VM VM
Zone 1
Zone 2
Zone 3
Zone redundant Load Balancer
VNet
VM scale set
VM scale set
VM scale set
Zone 1
Zone 2
Zone 3

28. Scale out with zone -redundant scale sets Limited Preview
Sign up here:
Zone redundant Load Balancer
Single end point for VMs spread across zones
Zone failure resilient
Auto Scaling
High level of isolation (FDs within zones)
VNet
VM scale set

29. Demo: Zonal scale sets 6/24/2018 4:52 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

30. High availability and hardware failures Expectation vs Reality
Overview
Hardware level telemetry on a massive scale
Use machine learning to predict when hardware is going to fail
Once hardware is predicted to fail, take one of the following actions
Provide a scheduled event notification and move the VM to a healthy hardware
Live migrate the VM to a neighboring node. Guest VM sees a 2-4 second blackout
Avoid allocating new VMs to unhealthy hardware

31. Planned Maintenance Control when planned maintenance occurs
Overview
Pre-emptive Window (30 days)
Starts with a notification to the user
Maintenance window is discoverable
Discover which VMs are going to be impacted in this wave
Allows you to self start maintainence
Scheduled Maintenance Window

32. Top Cloud SLA Only cloud vendor to offer single instance SLA
Overview
Single Instance: Azure will guarantee availability at 99.9% with only a single instance! Requires Premium Storage for all disks
Availability Set SLA: Multiple VMs deployed in Availability Set will have 99.95% availability for at least one VM!
Availability Zones SLA: Multiple VMs deployed in different Availability Zones will have industry leading 99.99% availability for at least one VM at Availability Zones GA!
AVAILABILITY SET
AVAILABILITY SET – 99.95% SLA
SINGLE VM – 99.9% SLA

33. Backup Integration Azure backup integrated into compute blade
Overview
Scheduled backups
On-Demand backups
Geo-redundant or Locally-redundant

34. Site Recovery Integration Azure Site Recovery integrated into compute blade
Overview
Setup DR for your VM in a few steps!
Keep your data safe, and apps/workloads running when planned and unplanned outages occur.

35. Agenda Infrastructure and Perf VM Availability Security
6/24/2018 4:52 PM
Agenda
Infrastructure and Perf
VM Availability
Security
Manageability and Monitoring
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36. Confidential Computing Encrypt your data while in use
Early Access Preview
Confidential Computing Encrypt your data while in use
Overview
Data is protected inside a Trusted Execution Environment (TEE)
Initial support for Intel SGX & Virtual Secure Mode (VSM)
Protects the most sensitive data against
Malicious insiders with admin privilege or direct access to hardware
Hackers & malware exploiting bugs in OS, app or hypervisor

37. Managed Service Identity Keep credentials out of code
Overview
Automatically creates an AD identity for the service instance
Call local MSI endpoint to get an AD access token
Use the AD access token to access any other Azure service that supports AD authentication

38. MSI Case study: CERN LHC Collision analysis
Integrating HTCondor with Azure infrastructure
Elastic-scale/burst computing with VMSS
Fast, easy scaling  - 10’s-1000’s cores
Economy: Pay for what you use
Solves large capacity and locality requirements using closest regional Azure Data Center
VMs using MSI to get a ‘secure VM identity’
Opens up Azure as a bursting platform for over 170+ institutions that collaborate with CERN

39. Announcing Disk Encryption for Scale Sets
Azure storage
Encryption extension
Azure key vault integration
Meet regulatory requirements
Encryption at rest
Auditable keys and policies
Secure from storage a/c, offline disk compromise
Supports key rotation
Azure PowerShell, CLI, ARM
Public preview, portal integration coming soon
Note: Linux OS disk encryption not supported in Preview
Upload Key
Key Vault
AAD token
Host
AAD
Resource Manager
Encryption Config
ARM/PS/CLI

40. Agenda Infrastructure and Perf Security VM Availability
6/24/2018 4:52 PM
Agenda
Infrastructure and Perf
Security
VM Availability
Manageability and Monitoring
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

41. Managing at scale Reducing costs and maintaining availability at massive scale
Deploy
Upgrade
Automate
Challenges
How do I deploy OS updates to 1,000s of VMs?
…without affecting application downtime?
I just want VMs, I don’t want to do OS maintenance

42. Announcing VM scale set rolling upgrades
Public Preview
Announcing VM scale set rolling upgrades
Overview
Update your scale set model with a new version (or set to latest)
Optionally configure:
Upgrade batch size
Instance health thresholds
Set a load balancer probe for application health

43. Demo: Rolling upgrade 6/24/2018 4:52 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

44. Announcing VMSS automatic OS upgrade
Public Preview
Announcing VMSS automatic OS upgrade
Compute Resource Provider
Scale set model
YES. Do OS upgrades
Is image on scale set older?
Overview
Set it and forget it approach to OS management
Optionally configure:
Upgrade batch size
Instance health thresholds
Load balancer probe for application health
Portal integration coming soon
Automatic OS Upgrader
Check OS upgrade applicability
Get latest platform image for given SKU
Regional Service Manager
Platform Image Repository

45. Configuring automated OS upgrades
Public Preview
Configuring automated OS upgrades
Set scale set OS “version” to “latest”
Set “mode” to “Rolling”
Set “automaticOSUpgrade” to “true”
Optionally set a load balancer probe for application health
Supported OS images in initial preview:
UbuntuServer LTS
Windows Server 2012-R2-Datacenter
Windows Server 2016-Datacenter

46. Instance Metadata Provide Azure context to the guest OS
Overview
RESTful endpoint available to all ARM VMs
Compute, networking, storage and scheduled events
Available on IP address in VM
curl -H Metadata:true " i-version= "

47. Operations integration Complete various operational tasks from Portal
Overview
Keep track of missing updates on the VM
Inventory of the software installed on the VM
Track changes made to files, software, daemons, registry

48. Demo: Operations integration
6/24/2018 4:52 PM
Demo: Operations integration
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

49. 6/24/2018 4:52 PM
Takeaways
Infrastructure – Expanded VM & disk sizes to match your app needs, and provide massive vertical/horizontal scale.
Availability – Use zone redundancy for high availability with easy configuration
Security – Apply simple, targeted, effective security with confidential computing, MSI, and VMSS encryption
Manageability – Information where it’s needed with Instance Metadata, automate OS lifecycle maintenance with VMSS rolling upgrade options
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

50. 6/24/2018 4:52 PM
See these features and more in action! BRK3247 – Today 2:00-2:45 Hyatt Regency Windermere W
Deploy a 1,000-VM machine learning infrastructure from scratch!
Update app/infra without downtime
Use Azure CLI 2.0, Chef, and VSTS CI/CD
No slides!
Leave the room ready to build and manage your killer app!
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

51. Please evaluate this session
Tech Ready 15
6/24/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

52. Upcoming VM Sessions (Cont.)
THR3043: The new planned maintenance experience …
Wednesday, September 27, 1:35 PM - 1:55 PM
BRK2372: Azure Disks: Scale, performance, and ease of use
Thursday, September 28, 10:45 AM - 12:00 PM
BRK2210: Everything you need to know about Microsoft Azure security
BRK3106: Application-aware disaster recovery for VMware, Hyper-V and Azure IaaS VMs with Azure Site Recovery

53. Upcoming VM Sessions (Cont.)
BRK3132: Protect your data with Microsoft Azure Backup
Thursday, September 28, 2:15 PM - 3:30 PM
BRK3279: Dive deep into the VM Marketplace in Azure
Thursday, September 28, 4:00 PM - 5:15 PM
BRK2199: Infrastructure as code: Leverage Ansible and Terraform
Friday, September 29, 10:15 AM - 11:00 AM
BRK3167: Tips and tricks with Azure Resource Manager
Friday, September 29, 10:45 AM - 12:00 PM

54. Upcoming VM Sessions (Cont)
BRK3313: Plan, orchestrate, and tune large resource deployments on Azure IaaS
Friday, September 29, 10:45 AM - 12:00 PM
BRK2130: Getting % availability for my IaaS Service: Running highly available Azure VMs
Friday, September 29,12:30 PM - 1:45 PM

55. Completed VM Sessions (Recordings)
BRK Azure Compute: New features and roadmap
BRK2101 – Business continuity for your business running in IaaS
THR3032: Migrating your IaaS infrastructure from ASM to ARM without downtime
BRK3178: Cost savings with Azure Virtual Machines
THR3016: Customer stories: Plan and orchestrate large …
THR1018R: Virtual machine diagnostics on Microsoft Azure
BRK3220: VM infrastructure innovation and automation

56. Please evaluate this session
Tech Ready 15
6/24/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

57. 6/24/2018 4:52 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.