1. Partner Practice Enablement - Overview This session will focus on integration strategies for applications deployed using Microsoft Azure Websites and Microsoft Azure Cloud Services. Learn how to securely consume services in a virtual machine from your applications. Audience: IT Professionals, Architects and Developers Module 1 – Introduction to Microsoft Azure Module 2 – Microsoft Azure Virtual Machines Module 3 – Microsoft Azure Networking Module 4 – Microsoft Azure Active Directory Module 5 - Cloud Services and Websites Module 6 - SQL Server and SharePoint Module 7 - Management and Monitoring

2. Cloud Services, Websites and Infrastructure Services

3. Agenda Microsoft Azure Compute Virtual Machines and Cloud Services Virtual Machines and Websites Azure Websites for IT Professionals

4. Microsoft Azure Compute

6. Why Integrate? Application Dependencies Allows development of new applications or migration of existing applications that have dependencies on resources that require virtual machines such as SQL Server, Mongo DB, Oracle etc... Hybrid Connectivity Using Microsoft Azure Virtual Networks to connect to on-premises resources allows for line of business applications hosted in Microsoft Azure.

7. Cloud Services

8. Workloads for Cloud Services Workloads that are designed to be stateless and can be easily scaled to multiple instances N-Tier Applications are well suited because Cloud Service has superb support for cross role communication and discovery. Your choice of language and frameworks as long as it runs on Windows. Workloads that can be deployed in an automated fashion

9. Microsoft Azure Service Model Example cloud service configuration with a single web role and a single worker role

10. VIP Swap

11. Mixing Virtual Machines & Stateless Roles Multiple cloud services with stateless and virtual machines

12. Virtual Machines and Cloud Services Side by Side Direct Connectivity Using Virtual Networking For advanced connectivity scenarios such as Active Directory or DCOM Connect Cloud Apps via VIPs Easily compose services by connecting public endpoints

13. Connecting Cloud Services via VIPs Strengths Simplicity Tenant Autonomy Easy Local Dev/Test WA Web Role Cloud Service 1 Cloud Service 2 SQL Server

14. DEMO Cloud Services VIP Connectivity

15. Connecting Cloud Services with VNET Strengths Lower Latency Protect VMs from the open Internet Advanced Connectivity Requirements Direct Access via VNET FrontEndSubnet (10.0.0.0/16) SQLSubnet (10.1.0.0/16) WA Web Role Cloud Service1 Cloud Service 2 AD SQL Mirror AD Subnet (10.2.0.0/16) ContosoVNet (10.0.0.0/8)

16. DEMO Cloud Services Virtual Network Connectivity

17. Websites

20. Creating a Web Site Using the Azure Management Portal

21. Publishing Web Sites FTP FTP Client (ie: FileZilla) Visual Studio Web Deploy Visual Studio Git Usually Automated via Service Hooks

22. Automating Web Site Deployment Publishing with Command Line Tools MSBuild FTP Scripts PowerShell Cross-Platform Command Line Interface (CLI) Web Deploy Command Line Publishing from Source Control Generally to a staged deployment slot…

23. Deployment Slots A separate web site linked to your primary web site. Each deployment slot has it’s own URL and runtime environment.

24. Staged Publishing Publish updates to your web site into the staging deployment slot. Run and Test in the Staging slot. Instantly Swap the Staging and Production Slots “Go Live” “Oops!”

25. Publishing From Source Control Git or Mercurial repositories are supported.

26. Connecting Websites via VIPs Strengths Access any backend that can be hosted on a virtual machine. Access on-premises resources using virtual machine hosted in virtual network. Cloud Service SQL Server Website

27. LAB Websites with VIP Connectivity

28. Custom Domains and SSL for Azure Websites

29. Custom Domains.azurewebsites.net Custom

30. Configuring Custom Domains DNS Registrar Add A or CNAME Record(s). Azure Management Portal In domain names section of the configure page for the web site. Click the manage domains button. Add domain name(s)

31. SSL with Azure Web Sites SSL Provided by Default https://contosoweb.azurewebsites.net. SSL with Custom Domain Requires Standard Mode SSL Bindings Server Name Indication (SNI) SSL Modern Applications and OS’s capable of using SNI SSL Multiple domains can share the same IP Address IP Based SSL Traditional SSL that supports older applications and OS’s One domain per IP Address

32. Configuring SSL in Azure Web Sites Obtain certificate(s) from a Certificate Authority. Upload Certificate(s) to Azure..pfx with password Configure SSL Bindings.

33. IP Based SSL Considerations Dedicated IP Address (inbound) Assigned to the Web Site. Can be retrieved in the quick glance section of the DASHBOARD page of the web site. Not the same as the Load Balancer IP Address used when configuring the A Record for a custom domain. A Record must be updated to use this Virtual IP Address.

34. Scaling Websites

35. Scaling Options SMALL 1 CORE 1.75 GB MEMORY 1 GB STORAGE MEDIUM 2 CORES 3.5 GB MEMORY 10 GB STORAGE LARGE 4 CORES 7 GB MEMORY 50 GB STORAGE For more information on websites options http://azure.microsoft.com/en-us/pricing/details/websites/

36. Websites Scalability

37. Backup and Restore Websites

38. Backup and Restore Feature Provides back and restore services for your web site and linked resources (databases). Requirements Standard Mode An Azure Storage Account (same subscription the web site is deployed in) Backups are stored in Blob storage.

39. Website Backup How Backups are Initiated Manual or Automated Content Included in the Backup Website configuration Website files (content) Linked Resources (SQL Database, MySQL) How Backups are Stored Azure Storage Account (blob) Container name: “websitebackups” A backup consists of a.ZIP file (the backup) and a.XML file (the manifest for the.ZIP).

40. Website Restore Website Restore Targets Current Website Existing Website is overwritten New Website Creates a new Website in the same region as the original. Website name is “restored-originalWebsiteName” Database Restore Targets None Restore to a different database server Restore to the original database

41. Site Control Management (“Kudu”)

42. What is “Kudu”? A Separate Companion/Administrative Web Site to your Web Site Your Web Site: http://contoso.azurewebsites.net Kudu Web Site: https://contoso.scm.azurewebsites.net Authentication Only the owner of a Web Site can Access the Kudu Site Use Credentials Associated with your Microsoft Azure Subscription Every Web Site gets a Kudu Site by Default Including Staging and Production slots Security Context contoso Cloud Drive APP SETTINGS CONNECTION STRINGS ENVIRONMENT VARIABLES SERVER VARIABLES SYSTEM INFORMATION kudu

43. More About Kudu Developed as an Open Source Project https://github.com/projectkudu/kudu Contribute to it or host your own Kudu is a “Site Extension” An Extension to your Web Site It has access to the file system and runtime environment of your Web Site

44. Web Site Extension Gallery

45. Summary Microsoft Azure Compute Virtual Machines and Cloud Services Virtual Machines and Websites Azure Websites for IT Professionals

46. Suggested Learning Exercises AssignmentEstimated Time Hands-on Labs and Tutorials Connecting a PaaS application to an IaaS Application https://github.com/WindowsAzure-TrainingKit/HOL-ConnectingApplications Connecting a PaaS application to an IaaS Application with a Virtual Network https://github.com/WindowsAzure-TrainingKit/HOL-ConnectingApplicationsVNet Deploying a.NET Website with a MongoDB Backend on a VirtualDeploying a.NET Website with a MongoDB Backend on a Virtual MachineMachine http://www.windowsazure.com/en-us/documentation/articles/web-sites-dotnet- store-data-mongodb-vm/ 45 minutes Video IaaS + PaaS = <3 http://channel9.msdn.com/Events/TechEd/NorthAmerica/2013/WAD-B325 Microsoft Azure Websites http://channel9.msdn.com/Events/windowsazure/Learn-2012TechEd-EU/WebSites 1 hour

47. Session Resources Microsoft Azure Virtual Network Overview http://msdn.microsoft.com/en-us/library/windowsazure/jj156007.aspx Instructor Led Training – Microsoft Azure for IT Professionals and Developers http://www.opsgility.com/courses/itpro-five-day http://www.opsgility.com/courses/dev-four-day Network ACL Capability in Microsoft Azure PowerShell http://michaelwasham.com/windows-azure-powershell-reference-guide/network-access-control-list- capability-in-windows-azure-powershell/

48. Microsoft Azure Resources Microsoft Partner Learning Path https://mspartnerlp.mspartner.microsoft.com/LearningPath Microsoft Azure Friday http://www.windowsazure.com/en-us/documentation/videos/windows-azure-friday/ Microsoft Virtual Academy http://www.microsoftvirtualacademy.com Channel 9 Microsoft Azure http://channel9.msdn.com/WindowsAzure Questions http://stackoverflow.com/questions/tagged/azure http://social.msdn.microsoft.com/Forums/windowsazure

49. Coming Up Next... SQL Server and SharePoint

50. Thank You