transforming isv's to azure

BASLE BERN BRUGG DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. GENEVA

HAMBURG COPENHAGEN LAUSANNE MUNICH STUTTGART VIENNA ZURICH

Transforming ISV’s to Azure

Meinrad WeissPrincipal Consultant

Agenda

Transforming ISV to Azure

Motivation (Why SaaS, why Azure or vice versa)

The customers (ISV’s) and their applications

Technical challenges

Non technical challenges

Our role

Next Steps

Motivation (Why SaaS, why Azure

or vice versa)


There is a growing demand and a global market

Swiss ISV Solutions as SaaS offering

Pure SaaS Players

e.g.

Hybrid Players

Providing SaaS

offerings to

Swiss customers

Swiss Customers

Asking

for SaaS offerings

International Companies

Swiss Companies like:

Providing Swiss

SasS offerings

to the whole world

Founded

1999

Cloud first,

mobile first

Hy

Responsible

Hybrid Cloud

IT Service Delivery Models

ISV

Source #2: IDC Direction 2014, Transformation Everywhere How SaaS Gets Built, March 2014

Source #1: IDC Forecasts Worldwide Public IT Cloud Services Spending to Reach Nearly $108 Billion by 2017 as Focus Shifts from Savings to Innovation, 2013 )

Software Revenue Growth Rate in 2017

Customers are buying services, not applications or servers

Shifting adoption patterns: using SaaS as a way to extend on-premises applications to replace existing applications with cloud alternatives

91% of net new software is built for cloud delivery in 20142

20% of all applications revenue in 2014 is generated by SaaS1

22%

4%

0%

5%

10%

15%

20%

25%

SaaS/PaaSRevenue

Packaged Software

5.5x higherCloud SW

growth than packaged SW

Customers (Consumers) are more and more inspired by SaaS


Cloud Infrastructure and Operations

Consumer and small business services

Enterprise services

Third-party hosted services

Software as a Service (SaaS)

SecurityGlobal NetworkOperationsDatacenters

PaaS

Application

Physical

Cert

ific

atio

n &

Secu

rity

Relia

nce

IaaS

Why Azure


Azure provides a broad set of IaaS, PaaS and SaaS service that can be used to form

a SaaS offering of the existing ISV Solution

Excellent price/performance tag

Global available (where the money is)

Highly secured

IaaS PaaS SaaS

Azure VM

Office 365

Active Directory

SQL DB

File Share

(RemoteApp) App Service

Popular Services for ISV’s:

Customers (Consumers) are more and more inspired by SaaS


Cloud Infrastructure and Operations

Consumer and small business services

Enterprise services

Third-party hosted services

Software as a Service (SaaS)

SecurityGlobal NetworkOperationsDatacenters

PaaS

Application

Physical

Cert

ific

atio

n &

Secu

rity

Relia

nce

IaaS

One platform -> Simplified Software Management


Instead of a broad spectrum

of hard and software There is a professional infrastructure

with controlled software releases

Location CH = Everything i.o?

In der Schweiz gab es in der vergangenen Woche eine Reihe von DDoS-

Angriffen auf Online-Shops, die Schweizerischen Bundesbahnen und

Finanzinstitute. In einem Fall wurden offenbar über 9000 Euro an die

Erpresser gezahlt.

Während sich die Schweiz als Partnerland der CeBIT 2016 in Hannover

präsentierte, haben Angreifer DDoS-Attacken auf viele Schweizer Websites

gefahren, darunter vor allem Online-Shops. Wie 20 Minuten berichtet,

befindet sich auch die Website der Schweizerischen Bundesbahnen (SBB)

unter den Zielen. Sie war am Montag für über eine Stunde nicht erreichbar.

DDoS-Angriffe ohne Lösegeldforderung

Die Attacken begannen offenbar am vergangenen Montag und betrafen

unter anderem die Shopping-Seiten Do-it, Digitec, Galaxus,

Interdiscount, LeShop, melectronics.ch, Micasa und Microspot. Ferner

war die Site der Schweizerischen Bundesbahnen (SBB) von 14:15 bis 15:30

Uhr nicht erreichbar. Es handelte sich um DDoS-Attacken, die Angreifer

haben die Dienste also mit Anfragen überflutet, bis die Server überlastet

waren. Zugriff auf die Infrastruktur ist dafür nicht nötig.


Microsoft Azure

Trustworthy foundationBUILT ON MICROSOFT EXPERIENCE AND INNOVATION

20+ Data Centers

Trustworthy Computing

Initiative

Security Development

LifecycleGlobal Data Center

Services

Malware Protection

Center

Microsoft SecurityResponse Center

Windows Update

1st

Microsoft Data

CenterActive

DirectorySOC 1

CSA Cloud Controls Matrix

PCI DSS Level 1

FedRAMP/FISMAUK G-Cloud

Level 2

ISO/IEC 27001:2005

HIPAA/HITECH

Digital Crimes

Unit

SOC 2

E.U. Data Protection Directive

Operations Security

Assurance

Microsoft Azure

20+ Data Centers



Initiative



Services

Windows Update

1st

Microsoft Data

CenterActive

DirectorySOC 1


PCI DSS Level 1


Level 2

ISO/IEC 27001:2005

HIPAA/HITECH

Digital Crimes

Unit

SOC 2


Operations Security

Assurance

Malware Protection

Center


Security Centers

of Excellence:

Protecting Microsoft

customers by combatting

evolving threats

Microsoft Azure

20+ Data Centers



Initiative



Services

Malware Protection

Center


Windows Update

1st

Microsoft Data

CenterActive

DirectorySOC 1


PCI DSS Level 1


Level 2

ISO/IEC 27001:2005

HIPAA/HITECH

SOC 2


Operations Security

Assurance

Digital Crimes

Unit

Digital Crimes Unit:

Using legal and

technical expertise

to disrupt the way

cybercriminals operate

http://www.erpsoftwareblog.com/2015/04/afraid-cybercrime-video-presentation-microsofts-digital-crimes-unit/

http://www.erpsoftwareblog.com/2015/04/afraid-cybercrime-video-presentation-microsofts-digital-crimes-unit/

Microsoft Azure

http://www.srf.ch/sendungen/rundschau/reizbild-burka-rachid-nekkaz-profit-aus-abfall-hacker-angriffe

http://www.srf.ch/sendungen/rundschau/reizbild-burka-rachid-nekkaz-profit-aus-abfall-hacker-angriffe

Main Reasons for SaaS


Global market/

Changing customer requirements

New customer segments

in the existing market

Stable, cost efficient and secure

infrastructure

The customers (ISV’s)

and their applications


www.swiss-soft.ch


www.chsoft.ch


New Customer Segments

The cloud allows ISV to rollout their solution

or subsets of their solutions to new customer

segments

For example Provis:

- Main player in huge constructing projects

Module for

defect management

New segment,

smaller companies

/ architects

SaaS helps

to speed up

adoption

Technical challenges


Common patterns


Main client is grown over the last years

- No Web UI

- Tight integration with Office

New client parts are written as mobile apps

and communicate via Web Services with

the backend

Most data is stored in SQL Server database

Some data is stored on the regular file system


U-DBT-

DB

T-

DB

Web Service

RDP

Azure

AD

Azure

APP Service

Azure

RemoteApp

Azure

SQL DB(U-DB = User Database

T-DB = Tenant Database)

T-S

QL

Provis

Client PC

Provis Baumängelmanagement – Recommended Services

Common patterns -> Azure options


Main client is grown over the last years

- No Web UI

- Tight integration with Office

New client parts are written as mobile apps

and communicate via Web Services with

the backend

Most data are stored in SQL Server database

Some data are stored on the regular file system

Azure VM

orOffice 365

Active Directory(RemoteApp)

App Service

SQL DB

File Share

GPU Support (for CAD workload)


https://azure.microsoft.com/en-us/documentation/videos/azurecon-2015-applications-that-scale-using-gpu-compute/

https://azure.microsoft.com/en-us/documentation/videos/azurecon-2015-applications-that-scale-using-gpu-compute/

Office 365 and Azure Active Directory


RemoteApp/XenApp require Office License

- Office 365 Business Premium contains Office Products (Office Business) but not the

required ProPlus versions

- Only Office 365 (E3, E4, E5) can be used in this context

- The same licenses can also be used on-premises

Azure Active Directory is used for user management

- Small customers in one ISV domain

- Bigger customers can have their own domains with integration

to existing, on-premises AD

App Service


Azure App Service includes the Web App

+ Mobile App capabilities that we previously

delivered separately (as Azure Websites

+ Azure Mobile Services)

The Azure App Service pricing is exactly

the same price as our previous Azure Websites offering.

SQL DB Levels/DTU’s


DTU Calculator

http://dtucalculator.azurewebsites.net/

http://dtucalculator.azurewebsites.net/

SQL DB Elastic Pool


All the databases in an elastic pool share a common set of resources.

The performance characteristics are measured by elastic Database Transaction Units (eDTUs).

Pools come in three service tiers: Basic, Standard, and Premium.

Pools allow databases to share and consume DTU resources without needing to assign a

specific performance level to each databases in the pool.


Best migration experience if:

- We have the most actual SQL Server tools

- We are close to Azure (network)

Simple way to achieve this goals

- Install a VM in Azure

with the latest SQL Sever database and tools

- Backup DB on local System

- Copy Backup-File to Azure

- Restore DB on SQL Server in Azure VM

- Do the next steps in the Azure VM

Azure SQL DB Migration


SQL Server Data Tools are very helpful to detect

incompatibilities between regular SQL Server and

Azure SQL DB

- Create New SSDT Project from existing SQL DB

- Set Target Platform to Azure SQL Database V12

- Check “errors”

Azure SQL DB – Prepare Migration

Azure SQL DB - Migrate


SQL Server Management Studio offers a “one step”

Migration option

Choose strong enough edition

to enable successful loading.

Scale down after data loading

is possible

Azure AD Authentication with SQL V12 DB


Azure Active Directory authentication

is supported by:

SQL Server 2016 Management Studio

and SQL Server Data Tools

for Visual Studio 2015

– Azure Active Directory users are

not shown in SSDT Object Explorer

• view users in sys.database_principals

.NET Framework Data Provider

for SqlServer .(NET Framework 4.6)

ODBC version 13.1

– bcp.exe cannot connect using AADA

Microsoft JDBC Driver 6.0

Azure File Storage (Share)


Azure File storage is a service that offers file shares in the cloud using the standard Server

Message Block (SMB) Protocol. - Both SMB 2.1 and SMB 3.0 are supported

- Azure virtual machines, cloud services and on-premises clients

can mount the share

- Quota are supported

- A file share can only be mounted using the access key

of the storage account

https://msdn.microsoft.com/library/windows/desktop/aa365233.aspx

Simple Pattern for Multi-Tenant


Existing applications are not written with a multi-tenant architecture

- They have just a user-data database

Application start logic has to be adapted

U-DBT-

DB

T-

DB

Azure

SQL DB(U-DB = User Database

T-DB = Tenant Database)

Login Company TenantDB

[email protected] Top Architect Tenant1



[email protected] Baumeister Tenant2

Fir

st lo

gin

Ten

an

t1 U

ser

Ten

an

t2 U

ser

mailto:[email protected]




Non technical challenges


Scale problem


Many ISV provide very specialized Software

- They have currently just a view number of customers

- Setup of a new customer is time consuming

- Very customer specific

- Not highly automated

- License fees are quite high

- Price changes are not that simple without making the existing customers unhappy

- Support activities are executed by developers of the software

- No 7 * 24 support available

If their SaaS solution takes off then they are not able to deal with the mass

Our role/options


Our role/options


Consult ISV

- Choosing the right services

- Solve SQL migration problems

- Multi-Tenant approach

- Using templates to instantiate infrastructure

Educate ISV

- On the required

services & technologies

Rollout SaaS solution on behalf of ISV

Act as help desk

- Provide 7 * 24 support

- Provide Premier Support access

Conclusion (1)

Opportunities

Challenges

Expanding Market Opportunity

Sell directly to business decision makers

More predictable revenue

Lower infrastructure support costs

Requires business model shifts

Revenue builds up more slowly, harder to invest back in business

Legal and regulatory concerns around data

SLA management - Requires high level operational disciplines

Requires re-architecting existing applications

Conclusion (2)

Software

Core Competencies

Essential value for ISVs to build

As-a-Service(Platform & Infrastructure

Management)

Non-core, but Necessities

Limited value for ISVs to build

Optimal managed infrastructure & services (SLA > 99.9%)

“Always” the same infrastructure -> Good for automation

Optimal time to market


Next steps …

Guided way to SaaS


ISV

SaaS

MigrationOne to one

Migration Workshop

ISV SaaS

Breakfast

Management

Strategic

Level

(2 hours)

Technical

Level

(2 days)

[email protected]


The end …

transforming isv's to azure

Technology