2013 © Trivadis BASEL BERN LAUSANNE ZÜRICH DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. HAMBURG MÜNCHEN STUTTGART WIEN TechTalk February 2013 Windows Azure

2013 © Trivadis

Windows Azure A-Z1

BASEL BERN LAUSANNE ZÜRICH DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. HAMBURG MÜNCHEN STUTTGART WIEN

TechTalkFebruary 2013

Windows Azure A-Z

Gerry Keune

[email protected]

07.02.2013

2013 © Trivadis

Trivadis – tolle Preise zu gewinnen!

Windows Azure TechTalk7. Februar 2013

½ Tag Azure Consulting for free

2013 © Trivadis

Windows Azure A-Z3



Windows Azure

FeaturesGerry Keune

[email protected]

07.02.2013

2013 © Trivadis

Windows Azure A-Z4

AGENDA

1. Overview

2. Application building blocks

3. Web Sites

4. Cloud Services

5. Virtual Machines

6. Media Services

7. Big Data

07.02.2013

2013 © Trivadis

Windows Azure A-Z5

Cloud Computing Pattern

07.02.2013

Usage

Com

pu

te

Time

Average

Inactivity

Period

“On and Off “

Com

pu

te

Time

“Unpredictable Bursting“

Average Usage

Average Usage

Com

pu

te

Time

“Growing Fast“

Com

pu

te

Time

Average Usage

“Predictable Bursting“

2013 © Trivadis

Cloud Services XaaS

07.02.2013Windows Azure A-Z

6

Software-as-a-Service

consume

SaaSPlatform-as-a-Service

build

PaaSInfrastructure-as-a-

Service

host

IaaS

2013 © Trivadis

Cloud Service Stack


7

On-Premise

Storage

Servers

Networking

O/S

Middleware

Virtualization

Data

Applications

Runtime

You m

anag

e

Infrastructure(as a Service)

Storage

Servers

Networking

O/S

Middleware

Virtualization

Data

Applications

RuntimeYo

u m

anag

e

Platform(as a Service)

Storage

Servers

Networking

O/S

Middleware

Virtualization

Data

Applications

Runtime

You m

anag

e

Software(as a Service)

Storage

Servers

Networking

O/S

Middleware

Virtualization

Data

Applications

Runtime

Man

ag

ed b

y v

en

dor

Man

ag

ed b

y v

en

dor

Man

ag

ed b

y v

en

dor

2013 © Trivadis

Windows Azure A-Z8

Cloud Variants

Public Cloud Open to anyone

Private Cloud Highly virtualized cloud data center

located behind company’s firewall. A private space dedicated to your

company within a cloud vendor Privacy and security of data

Hybrid Cloud Mix of Private/Public

07.02.2013

2013 © Trivadis

Windows Azure A-Z9

Cloud Computing Advantages

Lower Costs

Infrastructure, Client PC, Software

Billing and metering of services

High Elasticity and Scalability

High Availability

Optimized infrastructure

No maintenance

Application programming interfaces (APIs)

Security

07.02.2013

2013 © Trivadis

Windows Azure A-Z10

Cloud Computing Disadvantages

Stored data might not be secure …what if the Cloud looses your data !!!!

Requires (fast) Internet connection

Features might be limited by provider

There is a lack of Cloud standards

Migrating to another provider is complicated

07.02.2013

2013 © Trivadis

Windows Azure A-Z11

Windows Azure “The Microsoft Cloud”

Provides open and flexible Services Supports for various platforms and devices

Is running in Microsoft Data Centers 99.95 % SLA*

Microsoft Data Centers are globally distributed USA Asia Europe

- Dublin, Amsterdam

Data Center is organized in ~12 meters shipping containers

07.02.2013

2013 © Trivadis

Performance


12

50ms

100ms

200ms

2013 © Trivadis

Traffic Manager


13

http://appeurope.cloudapp.net/

http://appasia.cloudapp.net/

http://appusa.cloudapp.net/

2013 © Trivadis

Windows Azure A-Z14

07.02.2013

Demo Traffic Manager

2013 © Trivadis

Windows Azure A-Z15

Windows Azure Traffic Manager

07.02.2013

Policies Monitoring

appworld.cloudapp.net

DNS response1.2.3.4

Direct users to the service in the closest region with the Windows Azure Traffic Manager (Performance)

2013 © Trivadis

Traffic Manager Policy’s


17

Directs the user to the “best”/”closest” deployment

One deployment is primary

Traffic is redirected to another deployment if the primary goes down

Allows users from defined geographic locations to be directed to particular deployment

Sends traffic to different deployments based on fixed ratio (N/M)

Example: Direct the user to the “best” deployment between US South and West Europe

Example: All traffic is directed to US North; if it goes down, send all traffic to US South

Example: all users from US -> US North, all users from Asia -> US North, all users from Europe ‑> West Europe

Example: Direct 20% of user traffic to US South and 80% to US North.

2013 © Trivadis

Windows Azure A-Z18

Windows Azure Platform Services

07.02.2013

Windows Azure Compute

Create multiple deployments – user traffic manager to route traffic

Traffic Manager should update DNS to clients

Storage Role your own synchronizationService Specific implementation

SQL Database Use SQL Azure Data Sync ServiceService Specific implementation

Reporting ServicesDeploy reports to different locations

Service Specific implementation

Service Bus Create multiple namespacesService Specific implementation

Access Control Service FutureService Specific implementation

CacheCreate deployment specific cache(s)

Default programming model will handle cache failure

2013 © Trivadis

Windows Azure A-Z19

Application building blocks

07.02.2013

StorageBig data

Caching

CDN

Database

Identity

Media

Messaging

Networking

Traffic

2013 © Trivadis

Windows Azure A-Z20

Storage

Rich Data Abstractions designed for the Cloud Blobs Tables Queues Drives

High Accessibility and Scalability Geo-location support Data is automatically partitioned and load balanced across servers

Managed by Storage Account 100 TB Data per account Easy administration and monitoring

07.02.2013

2013 © Trivadis

Windows Azure A-Z21

CDN (Content Delivery Network)

Provides high-bandwidth global blob content delivery 18 locations globally (US, Europe, Asia, Australia and South

America), and growing

Blob service URL vs. CDN URL Blob URL: http://<account>.blob.core.windows.net/ CDN URL: http://<id>.vo.msecnd.net/ Support for custom domain names

Access details Blobs are cached in CDN until the TTL passes Use per-blob HTTP Cache-Control policy for TTL (new)

CDN provides only anonymous HTTP access

07.02.2013

2013 © Trivadis

Windows Azure A-Z22

Caching

A distributed, in-memory cache for applications running in Windows Azure

Simple administration End-user doesn’t bother with configuration, deployment, or

management

Highlight scalable solution with low latency and high throughput

07.02.2013

2013 © Trivadis

Windows Azure A-Z23

Networking

Secure network connectivity between on-premises and cloud Supports standard IP protocols

Enables hybrid apps access to on-premises servers

Simple setup and management Integrated with WA Service Model Cloud Services and VM’s supported

07.02.2013

Enterprise

Windows Azure

2013 © Trivadis

Windows Azure A-Z24

Messaging - Azure Service Bus

Provides secure messaging and connectivity across different network topologies

Enables hybrid applications that span on-premises and the cloud

07.02.2013

2013 © Trivadis

Windows Azure A-Z25

Identity-Access Control Service (ACS)

Integration Single Sign On and centralized authorization into your web applications

Standards-based identity providers Enterprise directories (e.g. Active Directory Federation Server v2.0) Web identities (e.g. Windows Live ID, Google, Yahoo!, …)

Windows Azure AD includes the Access Control Service (ACS) Projection of your AD in the cloud Federation provider Security Token Service (identity provider)

Security Token Service in the Cloud

07.02.2013

2013 © Trivadis

Windows Azure Best Practices26

Claims-based Solution

Stop building custom identification and user account databases into every new application

One approach to identity that works in various scenarios

Factoring out authentication of applications Easy upgrade to stronger authentication methods Identity Federation

WIF (Windows Identity Foundation) Framework simplifies implementing claims-based identity in your applications

Date

2013 © Trivadis


Claims-based Identity Model

User identity to your application is a set of claims

Claim is a statement about a user made from an authority Example: email address, username, roles) If you trust the authority (issuer) you will trust the claim

Releases Application from Authenticating users, storing user accounts and passwords Calling to enterprise directories to look up user identity details. Integrating with identity systems from other platforms or

companies.

Date

User Name: Email:

Roles: IsSpeaker:

[email protected], Trainer true

2013 © Trivadis


Security Token Service (STS)

STS builds, signs, and issues security tokens SAML (Security Assertion Markup Language) tokens are most

common

Claims, Tokens, and STSs are the foundation of claims-based identity

Date

Claim

List of Trusted

STS

Token

Token

1Authenticate user,

return token

2 Submit token

3Verfify token’s

signature and STS is trusted

4Use claims in token

2013 © Trivadis


Access Control Service

Allows you to integrate single sign on (SSO) and centralized authorization into your web applications

Date

2013 © Trivadis

Windows Azure A-Z30

Database

SQL Database Familiar SQL Server relational database model delivered as a service

- Support for existing APIs & tools SQL Azure provides logical server

- Looks like SQL Server to TDS Client- Actual data stored on multiple backend data nodes

Max database size 150 GB

SQL Data Sync (Preview) Synchronize selected data through a Windows Azure SQL Database

instance

Reporting Services SQL Server Reporting provided as a service

07.02.2013

2013 © Trivadis

Windows Azure A-Z31

Mobile Services (Preview)

Simplifies common development tasks for mobile devices Storage Push Notifications User authentication

Build scalable and high available back end solutions

07.02.2013

2013 © Trivadis

Windows Azure A-Z32

Windows Azure Compute Overview

07.02.2013

Web SitesQuickly and easy deployment to highly scalable cloud environment

CloudServices

High available, scalable applications and services using rich PaaS environment, Advanced mult-tierscenarios

VirtualMachines

Eeasily deploy and run durable Windows Serverand Linux VM’s using IaaS environment

2013 © Trivadis

Windows Azure A-Z33

Windows Azure Web Sites (Preview)

Provides easy and flexible web site hosting for web projects Static Sites, Custom build web applications Built-in support for various open source applications

- WordPress, Joomla, Composite C1 CMS ……

Good Scaling options Starting free of charge (limited Quotas) Scale-Up possible anytime

On-Premise applications can be moved with no changes

07.02.2013

2013 © Trivadis

Windows Azure A-Z34

Windows Azure Web Sites

Supported Developer Frameworks ASP.NET Classic ASP Node.js PHP

Easy Deployment options GIT, FTP, TFS, Web Deploy

07.02.2013

2013 © Trivadis

Windows Azure A-Z35

VM

Azure Web Site Management

Windows Azure Web Sites

07.02.2013

IIS Azure

LB

FTP WebDeploy GIT TFS

Code

VM

http://www.nazmarketing.co.uk/logo_joomla.jpg

2013 © Trivadis

Windows Azure A-Z36

07.02.2013

Demo Web Sites

2013 © Trivadis

Windows Azure A-Z37

Windows Azure Web Sites Scale

Scale Out (Shared Instances) Instances of application are running on

different web workers Shared capacity constrained applied Ideal for stateless applications

Scale Up (Reserved Instances) Application is running on dedicated box No Shared resource capacity limitations

07.02.2013

SHARED INSTANCES

RESERVED INSTANCE

:-):-):-)

:-)

2013 © Trivadis

Windows Azure A-Z38

Azure Web Site Quotas

07.02.2013

Quota Free Shared(per site) Reserved

File System Storage

1’024MB (all Sites) 1’024MB 10 GB

Data Out 165mb/day

Pay as you go, not included in base price

Pay as you go, not included in base price

CPU Time1hr/day, 2.5 minutes of every 5

4hrs/day, 2.5 minutes of every 5

N/A

Memory 1024mb/hr 512mb/hr N/A

2013 © Trivadis

Windows Azure A-Z39

Windows Azure Cloud Services

Cloud Services provides Platform as a Service (Paas) to build high available and scalable applications Most advanced compute option

Supports multi-tier architectures

Automated application management

07.02.2013

2013 © Trivadis

Windows Azure A-Z40

VM (Worker Role)VM (Worker Role)

VM (Web Role)VM (Web Role)

VM (Web Role)

VM


07.02.2013

IIS

TCP / HTTP(S)

App

Queue(Storage)

VM (Worker Role)

App

Azure LB Azure LBAzure LB

2013 © Trivadis

Worker Role Patterns

Queue Polling Worker Poll and Pop Messages within while(true) loop E.g. Map/Reduce pattern, background image processing

Listening Worker Role Create TcpListener or WCF Service Host E.g. Run a .NET SMTP server or WCF Service

External Process Worker Role OnStart or Run method executes Process.Start() Startup Task installs or executes background/foreground process E.g. Run a database server, web server, distributed cache

41 Windows Azure A-Z 07.02.2013

2013 © Trivadis

Windows Azure A-Z42


Windows Server 2008/R2, 2012 (64bit)

.NET 4.0 and .NET 4.5

Full Trust*

IIS7 - 8 Web Sites (ASP.NET, FastCGI)

Web Services (WCF)

Stateless Servers

HTTP(S), TCP

07.02.2013

2013 © Trivadis

Windows Azure A-Z43

Role Types

Web Role : The role is hosted on IIS

Worker Role : The role is an executable (you can create your own web server, host a database, …)

VM Role : The role is a non persistence VM. Use Windows services, scheduled tasks, etc. You configure and maintain the OS.

07.02.2013

Abstraction Control(i.e. Less IT & Less Plumbing Code)

Admin Web /

Worker Role

VM RoleWeb /

Worker Role

2013 © Trivadis

Windows Azure A-Z44

Cloud Services vs Web Sites

Cloud Services allows administrative access to your application’s VMs. Install arbitrary software that your application needs

Cloud Services allow Remote Desktop connections directly to an application’s VMs

Cloud Services provides separate staging and production environments. Application updates somewhat smoother than Web Sites.

Cloud Services allow networking technologies such as Windows Azure Virtual Network and Windows Azure Connect to hook on-premises computers to Cloud Services applications.

07.02.2013

2013 © Trivadis

Windows Azure A-Z45

Windows Azure Virtual Machines (Preview)

Creation and use of virtual machines in the Cloud (truly IaaS) Windows Server, Linux

Persistent VM roles Bring your own or use Microsoft provided

- You update and maintain them !!!

Possible to host: Active Directory, SharePoint 2010, SQL Server and more…

99.9% SLA on single-instance

Connect to on-premise using Windows Azure Virtual Network

07.02.2013

2013 © Trivadis

Windows Azure A-Z46

Virtual Machines Sizes

07.02.2013

VM Size CPU Cores Memory Bandwidth # Data

Disks

Extra Small Shared 768 MB 5 (Mbps) 1

Small 1 1.75 GB 100 (Mbps) 2

Medium 2 3.5 GB 200 (Mbps) 4

Large 4 7 GB 400 (Mbps) 8

Extra Large 8 14 GB 800 (Mbps) 16

Each Persistent Data Disk Can be up to 1 TB

2013 © Trivadis

Windows Azure A-Z47

VM

Windows Azure Virtual Machines

07.02.2013

BlobStorage

VHD(Gallery)

VHD(User)

VM VM

Virtual Machine Management(Portal / REST API)

RDP

2013 © Trivadis

Windows Azure A-Z48

VM

Grouping VM‘s

07.02.2013

VM

VM

VM

VM

VM

VM’s in Cloud Service

VIP

VIP

VIP

2013 © Trivadis

Windows Azure A-Z49

Load Balancing (VM’s in Cloud Service)

07.02.2013

VM

VM

VM

VM’s in Cloud Service

VIP

Azure LB

Port 80

Port 80

Port 80

Port 80

2013 © Trivadis

Windows Azure A-Z50

Virtual Machines Scenarios

Enterprise Application running in the Cloud

Test Environment and Development Fast and cheap way to emulate

Private / Hybrid Cloud

Disaster Recovery

07.02.2013

2013 © Trivadis

Windows Azure A-Z51

07.02.2013

Demo Virtual Machines

2013 © Trivadis

Windows Azure A-Z52

Media Services

Build and deliver high scalable end to end media solution workflows Streaming Applications Web based training solutions Video on demand solutions

Media Services simplifies development and delivery of complex media solutions Media storage (Azure Storage) Encoding and format conversion Content protection (DRM) Multi client support

- HTML5, Silverlight, Flash, IPhone, IPad…..

All service features are exposed using a consistent HTTP REST API

07.02.2013

2013 © Trivadis

Windows Azure A-Z53

Media Services Architecture

07.02.2013

REST APIs

Azur

e CD

N

Azure Media Services Components

“Build-On” Media Partners and Customers

Adaptive StreamingPorting Kits(STB, iOS/Android)

Silverlight

Windows Phone

HTML5

Flash

Partn

er C

DNs

Origin

Caching

Windows 8

Windows Azure Core Platform

Secure Media Ingest

Media Job Scheduling

Encoding

ContentProtection

On-DemandOrigin

Live Origin

Analytics

BroadcastScheduling

Ad Insertion XBOX

“Build-In”Partner Media Processors

Live Ingest

Live Encoding

Client Libraries

2013 © Trivadis

Windows Azure A-Z54

Media Services Code Snippet

07.02.2013

…string inputFilePath = @"C:\windows\Performance\WinSat\winsat.wmv";

CloudMediaContext mediaContext = new CloudMediaContext(new Uri("https://nimbustap.cloudapp.net/API/"), "F7DF85E4-E142-2212-A433-161FE60D409C", "7HCe8R6n", "urn:Nimbus", "https://nimbusvoddev.accesscontrol.windows.net");

IAsset asset = mediaContext.Assets.Create(inputFilePath);string fileName = asset.Files[0].Name;

IAccessPolicy readPolicy = mediaContext.AccessPolicies.Create("CanReadFor30Minutes", TimeSpan.FromMinutes(30), AccessPermissions.Read);

asset.AccessPolicies.Add(readPolicy);

ILocator locator = asset.Locators.Where(c => c.AccessPolicyId == readPolicy.Id && c.ExpirationDateTime > DateTime.UtcNow).First();

…

var uriBuilder = new UriBuilder(locator.Path);

uriBuilder.Path += Path.AltDirectorySeparatorChar + fileName;

Uri fullUrl = uriBuilder.Uri;…

2013 © Trivadis

Windows Azure A-Z55

Process

Create a video (e.g. WMV file)

Leverage Media Services to Upload video Transcode and encode BLOB

Leverage the video URL within SMF player or custom player Streaming Progressive Download

Embed SMF or custom player within a SharePoint (or SharePoint Online) site

07.02.2013

2013 © Trivadis

Windows Azure A-Z56

07.02.2013

Demo Media Services

2013 © Trivadis

Windows Azure A-Z57

Windows Azure Big Data

Windows Azure HDInsight (Preview) Apache Hadoop cluster in the cloud (or Windows Server) Built on the Hortonworks Data Platform (HDP)

Hadoop is an open-source software framework that allows distributed processing of large data sets across clusters Derived from Google MapReduce and Google File System

07.02.2013

2013 © Trivadis

Windows Azure A-Z58

What‘s BIG Data

Families Birthdays

Google processes about 24 petabytes (PB) of data per day

The Twitter community generates over 1 terabyte of tweets every day

The Large Hadron Collider at CERN produces 1PB/sec

07.02.2013

1 PB = 1000000000000000B = 10005 B = 1015 B = 1 million gigabytes = 1 thousand terabytes

2013 © Trivadis

Windows Azure A-Z59

..some other realistic Scenario

07.02.2013

Raw Data“Store it All” Cluster

Raw Data“Store it All” Cluster

NEW USER REGISTRY

NEW PURCHASE

NEW PRODUCT

Data Warehouse

Logs

Logs

How much do views for certain products increase when our TV ads run?

2013 © Trivadis

Windows Azure A-Z60

Map Reduce Workflow

07.02.2013

2013 © Trivadis

Windows Azure A-Z61

Map Reduce Pattern Sample

07.02.2013

map(String name, String document): // name: document name ("key") // document: document contents ("value") for each word w in document: EmitIntermediate(w, 1);

reduce(String word, Iterator partialCounts): // word: a word ("key") // partialCounts: a list of aggregated partial counts ("values") int result = 0; for each v in partialCounts: result +=v; Emit(result);

DataFischers Fritz fischt frische Fische, frische Fische fischt Fischers Fritz.

Input DomainD1: Fischers Fritz fischt frische FischeD2: frische Fische fischt Fischers Fritz

Intermediate DomainM1: («Fischers»,1) («Fritz»,1) («fischt»,1) («frische»,1) («Fische»,1)M2: («frische»,1) («Fische»,1) («fischt»,1) («Fischers»,1) («Fritz»,1)ReduceFischers = [1] ++ [1] -> [2] Fritz = [1] ++ [1] -> [2] fischt = [1] ++ [1] -> [2] frische = [1] ++ [1] -> [2] Fische = [1] ++ [1] -> [2]

MapP1 = map(«part1», «Fischers Fritz fischt frische Fische»P2 = map(«part2», «frische Fische fischt Fischers Fritz»

2013 © Trivadis

Windows Azure A-Z62

What‘s after Wordcount

Reverse Indexing Distributed Data cleansing Data Transformation Machine learning algorithmus Traditional analytics Predective analytics

07.02.2013

2013 © Trivadis

Hadoop on Windows

Integrate with Microsoft Business Intelligence

Choice of deployment on Windows Server + Windows Azure

Integrate with Windows Components (AD, Systems Center)

Easy installation and configuration of Hadoop on Windows

Simplified programming with . Net & Javascript integration

Integrate with SQL Server Data Warehousing

Diff

ere

nti

ati

on

2013 © Trivadis

Windows Azure A-Z64

Ressources

http://hadoop.apache.org https://www.hadooponazure.com/ http://www.microsoft.com/bigdata/

07.02.2013

http://hadoop.apache.org/



https://www.hadooponazure.com/

https://www.hadooponazure.com/

http://www.microsoft.com/bigdata/

2013 © Trivadis

Windows Azure A-Z65



Windows Azure

Services ManagementGerry Keune

[email protected]

07.02.2013

2013 © Trivadis

Windows Azure A-Z66

AGENDA

1. Management Portal

2. Service Administration

3. Monitoring

07.02.2013

2013 © Trivadis

Windows Azure A-Z67

Management Portal

Start to use Azure by creating a Subscription MSDN subscriptions include Windows Azure service

07.02.2013

www.windowsazure.com

2013 © Trivadis

Windows Azure A-Z68

07.02.2013

Demo Management Portal

2013 © Trivadis

Windows Azure A-Z69

Service Administration

Azure Management Portal Windows Azure PowerShell

Automate deployment and management of your workloads in Windows Azure

Azure Command Line Tools Similar to PowerShell Use for Windows, Mac and Linux

Windows Azure Service Management REST API Manage services and deployments Operations executed over SSL and authenticated using X.509 v3

certificates

07.02.2013


2013 © Trivadis

Windows Azure A-Z70

07.02.2013

Demo Service Managementusing Power Shell

2013 © Trivadis

Windows Azure A-Z71

Monitoring

Management Portal Good overview about health, status, most important counters and

quotas

Remote Desktop RDP Supported on VM’s and Roles Full control but information is not centralized

Windows Azure Diagnostics (Web/Worker Roles) Collects diagnostic data from applications running in Azure Use for diagnostics, debug, troubleshoot

System Center Operations Manager (SCOM) Allows performance and availability monitoring of azure

applications

- Uses Azure Diagnostics

07.02.2013


2013 © Trivadis

Windows Azure A-Z72

Azure Diagnostics Overview

Windows Azure diagnostic monitor runs in Windows Azure and in the compute emulator

Diagnostics must be enabled at application creation time.

Collects diagnostic data for a role instance

API or Config-File configuration

07.02.2013

2013 © Trivadis

Windows Azure A-Z73

Tracing/Logging - Windows Azure Diagnostics (WAD)

Type of Log Storage Notes

Windows Azure logs generated from your code Table

Trace listener must be added to web.config or app.config file The files are stored in WADLogsTable.

IIS 7.0 logsBlob

Web roles only. Stored in a Blob container under the path wad-iis-logfiles\<deployment ID>\<web role name>\<role instance>\W3SVC1.

Windows Diagnostic Infrastructure logsTable

Information about the diagnostics service itself. Stored in WADDiagnosticInfrastructureLogsTable.

Failed request logs

Blob

Web roles only. Enable by setting tracing options under system.WebServer settings in web.config. Stored in a blob container under the path wad-iis-failedreqlogfiles\<deployment ID>\<web role name>\<role instance>\W3SVC1.

Windows Event logsTable

Enable by altering DiagnosticMonitor Configuration.WindowsEventLog when setting up initial configuration. Stored in WADWindowsEventLogsTable.

Performance countersTable

Enable by altering DiagnosticMonitor Configuration. PerformanceCounters. Stored in WADPerformanceCountersTable.

Crash dumps

Blob

Enable by calling CrashDumps.EnableCollection. Stored in a blob container under the path wad-crash-dumps. Because ASP.NET handles most exceptions, this is generally useful only for a worker role.

07.02.2013

2013 © Trivadis

Windows Azure A-Z74

Tracing/Logging – Best Practices

Catch your errors

Log Smart !!!!

Set up a separate storage account for diagnostics You can have a separate access key for diagnostics, granting this to

a broader audience An additional storage account does not necessarily equate to

additional cost. You’re simply billed for the storage you consume Ensure both of them are located in the same affinity group / geo

location

LogLevel maintainable through Service Configuration

07.02.2013

2013 © Trivadis

Windows Azure A-Z75

Same Region / Affinity Group

Tracing/Logging – Best Practices

07.02.2013

MyData

Blob Storage

MyDiagnostics

Blob Storage

My Application

Windows Azure DiagnosticsApplication Data

2013 © Trivadis

Windows Azure A-Z76

Tracing/Logging – Custom Logging

Custom error logs capture any files from any directory that you designate.

The directory that you specify must be configured as local storage for your deployment.

Integrates legacy logging Custom File Logger Log4Net

07.02.2013

2013 © Trivadis

Windows Azure A-Z77

Tracing/Logging – Enable WAD

07.02.2013

2013 © Trivadis

Windows Azure A-Z78

SCOM

System Center 2012 puts you in the driving seat

App Controller Deploy and manage services/roles and instance counts

Operations Manager Monitoring health and performance

07.02.2013

2013 © Trivadis

Windows Azure A-Z79



Windows Azure

IT IntegrationGerry Keune

[email protected]

07.02.2013

2013 © Trivadis

Windows Azure A-Z80

AGENDA

1. Overview

2. SQL Data Sync

3. Service Bus

4. Virtual Network

07.02.2013

2013 © Trivadis

Windows Azure A-Z81

Overview

07.02.2013

CLOUD ENTERPRISE

Application-Layer Connectivity &

Messaging Service Bus

Data Synchronization

SQL Data Sync

Secure Machine-to-Machine

ConnectivityWindows Azure Connect

Secure Site-to-Site Network

ConnectivityVirtual Network

IP-level connectivity

2013 © Trivadis

Windows Azure A-Z82

SQL Data Sync

Microsoft Sync Framework technology delivered as a service on the Windows Azure Platform

Ideal for scheduling synchronization between data sets hosted in Azure SQL Databases and/or On Premise SQL Server

07.02.2013

2013 © Trivadis

Windows Azure A-Z83

SQL Data Sync

Conflict resolution policy configured centrally (hub or client wins)

Sync direction configured between each client and the hub (to hub, from hub, bi-directional)

Sync schedule must be between 5 minutes and 1 month

Data sets include multiple tables and can be filtered, triggers are added to data set tables

Tables added to hub and client schemas

Local Agent must be installed for on-premise clients

07.02.2013

SQL Azure (Hub)

SQL Azure (US)

SQL Azure (WE)

SQL Server

(OnPrem)

2013 © Trivadis

Windows Azure A-Z84

07.02.2013

Demo SQL Data Sync

2013 © Trivadis

Windows Azure A-Z85

Service Bus

Enterprise Service Bus (ESB) in the Cloud Application messaging bus infrastructure ESB is an enterprise architecture pattern that defines

connectivity, contracts, and communication of business objects across enterprise applications

Provides secure messaging and connectivity across different network topologies

Enables hybrid applications that span on-premises and the cloud Implements open format and protocols Supports REST and WS-*

Uses ACS to allow sending messages to and listening on endpoints

07.02.2013

2013 © Trivadis

Windows Azure A-Z86

Challenges

Addressability and discoverability Private addresses and Network Address Translation (NAT) Dynamic addresses (e.g. ISP)

Connectivity Firewalls (denial of inbound connections) Event distribution Transient connectivity

07.02.2013

??? NATFirewall

Dynamic IP

2013 © Trivadis

Windows Azure A-Z87

Service Bus Relaying Messages

All problems in computer science can be solved by another level of indirection Butler W. Lampson

07.02.2013

???

Azure Service Bus

NATFirewall

Dynamic IP

2013 © Trivadis

Windows Azure A-Z88

Service Bus Relaying Messages

07.02.2013

Backend

NamingRouting

Fabric

solution. a b

FrontendNodes

outbound

connect one-way

net.tcp

outbound connect bidi socket

MsgMsg

NATFirewall

Dynamic IP

NLB TCP/SSL HTTP(S)TCP/SSL HTTP(S)

RouteSubscribe

2013 © Trivadis

Windows Azure A-Z89

Service Bus Architecture

07.02.2013

2013 © Trivadis

Windows Azure A-Z90

Security

Messages travelling between communication parties can be secured [Microsoft.ServiceBus.EndToEndSecurityMode]

Message security is independent of relay security

Message Security Types None

- Disables Security Transport (Default)

- Message is sent through a secure channel (e.g HTTPS) to and from the relay service. (Not Secure within AppFabric SB)

Message- Encrypt body of the message (X509)

TransportWithMessageCredentials- Combination of Transport/Message types

07.02.2013

2013 © Trivadis

Windows Azure A-Z91

Messaging Fabric

Messaging Fabric enables the relaying and communication of messages between clients and services

Exposes Service Endpoints into the Cloud Accessible for Cloud & On-Premise Services

Relay Service allows communication between the client and services behind firewalls and NAT routers

Communication Patterns One-way communication Publish/Subscribe Peer-to-Peer Multicast Direct Connections

07.02.2013

two-way

one-way

multicastmultiplexpub/sub

buffered

Communication Patterns

2013 © Trivadis

Windows Azure A-Z92

07.02.2013

Demo Service Bus

2013 © Trivadis

Windows Azure A-Z93

Virtual Network

Hybrid and Private Cloud scenarios Connect On-Premise and Cloud applications A private space dedicated to your company

Virtual network uses IPsec to secure the connection between your datacenter, through its VPN gateway and Windows Azure

Full control of the network topology configure IP addresses

Upon creation of VM’s they can immediately be added to configured subnets

07.02.2013

2013 © Trivadis

Windows Azure A-Z94

Virtual Network

Virtual Machines deployed into a virtual network have an infinite DHCP lease

07.02.2013

VM1 VM2

(Role)

Subnet 1

Subnet 2

2013 © Trivadis

Windows Azure A-Z95

Virtual Network VPN Device List

Generic VPN devices must support IKE v1 AES 128, 256 SHA1, SHA2

07.02.2013

Platform OS Family Examples

ASA 5500 Series (Adaptive Security Appliances)

ASA Software 8.4+

5505, 5550

ASR 1000 Series Aggregation Services Routers

IOS XE 2.1+ 1002

ISR Series Integrated Services Routers

IOS 12.2+ 2801, 2901, 2911

Platform OS Family Examples

SRX Series Routers JunOS 10.2+ 210, 650

J Series Routers JunOS 9.4+ 4350

ISG Series Routers ScreenOS 6.2+ SX2

SSG Series Routers ScreenOS 6.2+ 550

Cisco Juniper

2013 © Trivadis

Windows Azure A-Z96

Azure Connect

Provides network-level bridge between cloud and on-premises environments

Enables cross-premises connectivity

Simple setup and management- No VPN device or network configuration required

07.02.2013

2013 © Trivadis

Windows Azure A-Z97

07.02.2013

Demo Azure Connect

2013 © Trivadis

Windows Azure A-Z98



Windows Azure

DevelopGerry Keune

[email protected]

07.02.2013

2013 © Trivadis

Windows Azure A-Z99

AGENDA

1. Overview

2. Tools & Ressources

3. Mobile Development

4. Q&A

07.02.2013

2013 © Trivadis

Windows Azure A-Z100

Overview

07.02.2013

http://www.windowsazure.com/develop

2013 © Trivadis


Azure Authentication

07.02.2013

Management API

REST API

Portal

Your Service

2013 © Trivadis


Visual Studio Tools

Azure SDK side-by-side support

IIS Express for local development

Improved server explorer

Direct RDP from Visual Studio

Improved publishing (incl. simultaneous update)

07.02.2013

2013 © Trivadis


.NET SDK Developer Improvements

Cloud Configuration Manager Class

Better NuGet-integration Updating of references easier Better, clear structure of libraries

Support for new networking functions UDP support Virtual network configurations

07.02.2013

2013 © Trivadis


Visual Studio Tooling

Project Template for Cloud Services

ASP.NET Web Role

ASP.NET MVC Web Role

WCF Service Web Role

Worker Role

CGI Web Role

Integration with development fabric

IntelliTrace for Windows Azure (Ultimate only)

Deploying to Azure Cloud from within Visual Studio

104 Windows Azure for developers07.02.2013

2013 © Trivadis

Project Structure

For every role you get an own project

Special Azure Deployment Project

Two important configuration files

Service definition file

Service configuration file


07.02.2013

2013 © Trivadis


Development fabric

Simulates the Windows Azure fabric on your local computer

Is free. You will be not charged from MS

The development fabric UI enables you to debug your services locally

No Access Control Service

No Service Bus

No Caching


2013 © Trivadis


07.02.2013

Demo Visual Studio Development

2013 © Trivadis


Mobile Development

Mobile applications fit perfect into cloud environments

Accessible from anywhere Internet Services Standard based API’s

Scalable and high available compute back-ends

Infinite storage capacity


2013 © Trivadis


Windows Azure Mobile Services

Windows Azure Mobile Services Official SDK’s for Windows 8, Windows Phone, iOS, Android JavaScript Library

Common task are simplified User Authentication Push Notifications Structured Storage


2013 © Trivadis


07.02.2013

Demo Mobile Services

2013 © Trivadis



Thank You Q & AGerry Keune

[email protected]

07.02.2013

Documents

2013 © Trivadis BASEL BERN LAUSANNE ZÜRICH DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. HAMBURG MÜNCHEN STUTTGART WIEN TechTalk February 2013 Windows Azure