seeing is believing - -microsoft

Developer

IT Pro

Monitor, secure, maintain, patch

Manage SERVERS

New World

Hosted Service Hosted Service Hosted Service

Monthly

OPEX

Less CAPEX

Deliver new BUSINESS CAPABILITIES every few MONTHS

Infrastructure as a Service

Azure Platform as a Service

Communicates with every server under its control

Uses the Service Model to manage your service

Update Domain1 Update Domain2 Update Domain3

web2 web3 web1

Monthly

Leverage your benefits Prototyping

Tinkering

Unit Testing

BUT, don’t go into production on MSDN+Azure Subscription

Tied to personal WLID

Resource limits

http://www.windowsazure.com/en-us/develop/overview/

Demo

Create Cloud Project, Add Roles & Code

Application Code & Data

vhd

Image Repository

Master WS2k8R2 vhd

Patching/Temp/ Config vhd

Service

Web Role

Worker Role

VM Role

All roles in Azure are stateless

All roles, including VM Role run Windows Server 2008R2 or 2008 Service Pack 2

Role Image provided by Purpose Security patches

applied by

Mechanism

Web role Microsoft Web sites & applications Azure Fabric

Controller

Automatic, invisible

Worker role Microsoft Generic Windows Services Azure Fabric

Controller

Automatic, invisible

VM Role Customer Customer code with special

configuration

Customer Manual

Control

More IT &

management

Abstraction

Less IT & less low

level plumbing code

Web / Worker Role

in Admin Mode

Web / Worker Role

in User Mode

VM Role

2

Scale

6 92

Different instance sizes to handle complex workloads of any size

Small

1 x 1.6Ghz

1.75 GB memory

250 GB storage (instance storage)

Medium

2 x 1.6Ghz

3.5 GB memory

500 GB storage (instance storage)

Large

4 x 1.6Ghz

7.0 GB memory

1000 GB storage (instance storage)

Small

$0.12

Per service hour

Medium

$0.24

Per service hour

X-Large

$0.96

Per service hour

Large

$0.48

Per service hour

X-Large

8 x 1.6Ghz

14 GB memory

2000 GB

(instance storage)

X-Small

$0.04

Per service hour

X-Small

1 x 1.0Ghz

(low IO)

768 MB memory

20 GB storage (instance storage)

XL instance: 8 cores .96/hr

L instance: 4 cores .48/hr L instance: 4 cores .48/hr

M instance: 2 cores .24/hr M instance: 2 cores .24/hr M instance: 2 cores .24/hr M instance: 2 cores .24/hr

SM : 1 core .12/hr

SM : 1 core .12/hr

SM : 1 core .12/hr

SM : 1 cores.12/hr

SM : 1 core .12/hr

SM : 1 core .12/hr

SM : 1 core .12/hr

SM : 1 core .12/hr

Pre-Signup Considerations

Simple Or More Secure?

Production Slot

Staging Slot

Production Slot

Staging Slot

Production Slot

Staging Slot

Production Slot

Staging Slot

Production Slot

Staging Slot

Production Slot

Staging Slot

Production Slot

Staging Slot

Production Slot

Staging Slot

Production

Staging

Production

---

Dev

Prod

Dev

Prod

Inventory

Prod

Timecards

Prod

Marketing

Dev

Inventory

Dev

Timecards

Dev

Marketing

Prod

Dev

Prod

Dev

Prod

Production

Staging

Production http://timecards.cloudapp.net

---

Production

Staging

Production http://marketing.cloudapp.net

---

Developers Certificate based from Visual Studio

Ideally managed by IT Team & certificate

server

No access to Production Subscription for

Dev team

IT Pros WLID based via Portal

Co-admins have same rights as Admin

Consider split password across multiple IT

Pros

see you’re paying for it Stopped

In use by Contoso.com

Reserved for Contoso.com

Thank You!

http://msdn.microsoft.com/en-us/hh150160

Code

Publishing

Certificate

(.pfx)

Management

Certificate (.cer)

Programmatic access to SMAPI • Add/Delete roles

• Start/Stop roles

• Manage Hosted Sevice

Azure Storage (Blob, Table, Queue)

SQL Azure

http://blogs.msdn.com/b/buckwoody/archive/2011/08/02/windows-azure-security-review.aspx

Guest In

stance

Guest In

stance

Guest In

stance

Guest In

stance

Guest In

stance

Guest In

stance

Guest In

stance

Network

Guest

Ag

ent

Guest

Ag

ent

Guest

Ag

ent

Guest

Ag

ent

Guest

Ag

ent

Guest

Ag

ent

Guest

Ag

ent

Fabric Controller

Root VM

Hypervisor

Node Security

Firew

all

Firew

all

Firew

all

Firew

all

Firew

all

Firew

all

VLAN Firewall

Packet Filter

Packet Filter

Firew

all

Packet Filter

Fabric Agent

Hosted Service

Production http://hellocloud.cloudapp.net

Staging http://57237a24bc2b4d4aa9592f730300aa12.cloudapp.net

Production http://hellocloud.cloudapp.net

VIP: 65.52.33.22

Staging http://57237a24bc2b4d4aa9592f730300aa12.cloudapp.net

VIP: 65.53.33.146

“Hello Cloud”

“Hello Cloud v2”

Hosted Service

Name Slot Service URL IP Address

Hello Cloud Production http://hellocloud.cloudapp.net

Hello Cloud Staging

65.53.33.146

Production http://hellocloud.cloudapp.net

Staging http://57237a24bc2b4d4aa9592f730300aa12.cloudapp.net

“Hello Cloud”

65.52.33.22

http://57237a24bc2b4d4aa9592f730300aa12.cloudapp.net 65.53.33.22 65.53.33.146 Azu

re D

NS

tab

le