TechNet Events Presents – for the IT Professional In this session, we will discuss: Azure architecture from the IT professional’s point of view Why an IT operations team would want to pursue Azure as an extension to the data center Configuration, deployment and scaling Azure-based applications The Azure roles (web, web service and worker) Azure storage options Azure security and identity options How Azure-based applications can be integrated with on-premises applications How operations teams can manage and monitor Azure-based applications

1. TechNet Events Presents:Real World Azure clint edmonson | architect evangelist | www.notsotrivial.net shawntravers| it pro evangelist | blogs.technet.com/shawnt

2. This is Jim Cloud Computing

3. Jim has many questions about cloud computing Cloud Computing

4. The more he reads, the more confused he gets Cloud Computing

5. “What is Cloud Computing?” Cloud Computing

6. “What can I use the Cloud for?” Cloud Computing

7. “What is Microsoft’s roadmap in this space?” Cloud Computing

8. “Is this going to eat my job?” Cloud Computing

9. “Am I prepared for when my boss asks me about this?” Cloud Computing

11. Define Cloud Computing Break down the parts Highlight the implementation of a Real World Azure scenario

13. Jim has heard all the buzzwords

14. Service Oriented Architecture

15. Rich Internet Applications

16. Software as a Service

17. Software + Services

18. Are any of these cloud computing?

19. No. They are Styles of applications.

20. These styles can work in the cloud, but they are not cloud computing

21. Where do your applications “live”?

22. On Premises Hosted Cloud Vendor’s Problem

23. S+S Chapter

24. “Packaged” Application An application that I buy “off the shelf” and run myself Heads in the Cloud, Feet on the Ground Hosted “Packaged” An application that I buy “off the shelf” and then run at a hoster “Packaged” using cloud An application that I buy “off the shelf”, that is hosted using cloud platform “Software as a Service” A hosted application that I buy from a vendor Buy Build vs. Buy “Home Built” Application An application that I develop and run myself Hosted “Home Built” An application that I develop myself, but run at a hoster “Home Built” using cloud An application that I develop myself, that is hosted using cloud platform “Platform as a Service” A vendor hosted development and runtime environment Build Hoster Vendor On Premise Cloud

25. “Packaged” Application Big Pharmaceutical Example Hosted “Packaged” “Packaged” using cloud “Software as a Service” Buy ERP “Too costly to run this myself, but I’ve made too many customizations” CRM Email Build vs. Buy “Home Built” Application Hosted “Home Built” “Home Built” using cloud “Platform as a Service” HR System Molecule Research Build Clinical Trial Hoster Vendor On Premise Cloud

26. “Packaged” Application Big Pharmaceutical Example Hosted “Packaged” “Packaged” using cloud “Software as a Service” Buy ERP CRM “CRM and Email are commodity services – They have no customizations, and it’s cheaper for someone else to run these” Email Build vs. Buy “Home Built” Application Hosted “Home Built” “Home Built” using cloud “Platform as a Service” HR System Molecule Research Build Clinical Trial Hoster Vendor On Premise Cloud

27. Big Pharmaceutical Example “Packaged” Application Hosted “Packaged” “Packaged” using cloud “Software as a Service” Buy ERP CRM Email Build vs. Buy “Home Built” Application Hosted “Home Built” “Home Built” using cloud “Platform as a Service” “I can’t afford to maintain this old HR application written in VB – it’s driving me mad!” HR System “…but due to regulatory issues, I cannot store my HR data off-premise” Molecule Research Build Clinical Trial Hoster Vendor On Premise Cloud

28. “Packaged” Application Big Pharmaceutical Example Hosted “Packaged” “Packaged” using cloud “Software as a Service” Buy ERP CRM Email HR System Build vs. Buy “Home Built” Application Hosted “Home Built” “Home Built” using cloud “Platform as a Service” “I wish I had access to cheaper compute and storage when I need it” Molecule Research Build Clinical Trial Hoster Vendor On Premise Cloud

29. “Packaged” Application Big Pharmaceutical Example Hosted “Packaged” “Packaged” using cloud “Software as a Service” Buy ERP CRM Email HR System Build vs. Buy “Home Built” Application Hosted “Home Built” “Home Built” using cloud “Platform as a Service” Molecule Research Build “THIS is where I want to spend my IT resources – I’m going to double down on this application!” Clinical Trial Hoster Vendor On Premise Cloud

30. Challenges and Concerns with Cloud Computing

31. Security

32. “Packaged” Application Hosted “Packaged” “Packaged” using cloud “Software as a Service” Buy ERP CRM Email HR System Build vs. Buy “Home Built” Application Hosted “Home Built” “Home Built” using cloud “Platform as a Service” Molecule Research Build Clinical Trial Hoster Vendor On Premise Cloud Identity and AuthN

33. Scalability

34. Regulations and other legal issues

35. Software + Services is the answer

36. Lap of Azure Chapter

37. Warning – this session contains information about Microsoft Technologies that are in the CTP (pre-Beta) stages. Specifics of the technology may change before final release.

38. Hey! Why are you showing me CTP stuff?

39. Feedback.

40. We are here to help. Send us your questions, doubts, concerns, challenges, adoration, regrets, denials, and alibis. We will start a discussion and help you out. azFeedbk@microsoft.com

41. RTC makes it easy to ship updates and new features.

42. Windows Azure Platform Roadmap ? Additional Geos Enhanced compliance Commercial launch Geo location Future CY 2010 Q4 2009 Inter-Role Communication Variable VM Sizes Enhanced compliance

43. Windows Azure Platform Microsoft Cloud Services Applications

44. Windows Azure Platform Compute:Virtualized compute environment based on Windows Server Storage: Durable, scalable, & available storage Management: Automated, model-driven management of the service Database:Relational processing for structured/unstructured data Service Bus: General purpose application bus Access Control: Rules-driven, claims-based access control

45. Azure Datacenter Chapter

49. OS Analogy Chapter

50. What does an Operating System do? App1 App2 App3 App4 Management / Security / etc. Task Scheduler Hardware Abstraction Layer DISK CPU GPU Memory

51. Azure does this for the cloud App1 App2 App3 App4 APIs / .NET ACS / etc. Azure Fabric Controller Azure Fabric Server 1 Server 2 Server 3 Server 3,500

52. How many servers do you support?

53. “What is Microsoft doing in Cloud Computing?”

54. 3 x Critical Concepts

55. Roles Web Role Worker Role

56. Storage Table, Blob, Relational

57. Messaging Queues, .NET Service Bus

58. Patterns for Cloud Computing Using the Cloud for Scale

59. “Isn’t the cloud good for applications that need to scale dynamically?” Patterns for Cloud Computing

60. For example, tax applications Patterns for Cloud Computing

61. “How does this work?” Patterns for Cloud Computing

62. Let’s do some white boarding for Jim… Patterns for Cloud Computing

63. Using the Cloud for Scale “Wow! What a great site!” Database Request Web Tier Backend Tier Browser Response

64. Using the Cloud for Scale Browser Browser Database Web Tier Backend Tier Browser “Server Busy” Browser Browser

65. Using the Cloud for Scale Browser Browser Database Web Tier Backend Tier Browser “Timeout” Browser Browser

66. How would Jim do this today on premises?

67. Using the Cloud for Scale How would Jim do this today on premises? Browser Web Tier N L B Browser Database Web Tier Backend Tier Browser Browser Web Tier Browser

68. Using the Cloud for Scale How would Jim do this today on premises? Browser Backend Tier N L B Browser Database Web Tier Browser Backend Tier Browser Backend Tier Browser

69. Using the Cloud for Scale How would Jim do this today on premises? Browser Web Tier N L B Backend Tier N L B Browser Database Web Tier Browser Backend Tier Browser Web Tier Backend Tier Browser

70. Using the Cloud for Scale How would Jim do this today on premises? Browser p1 p2 p3 Web Tier N L B Backend Tier N L B Browser Database Web Tier Browser Backend Tier Browser Web Tier Backend Tier Browser

71. Not without consequences...

72. Using the Cloud for Scale How would Jim do this today on premises? Browser p1 p2 p3 Web Tier N L B Backend Tier N L B Browser Database Web Tier Browser Backend Tier Browser Web Tier Backend Tier Browser “That took a lot of work - and money!”

73. Using the Cloud for Scale How would Jim do this today on premises? p1 p2 p3 “Not so great now…” Web Tier N L B Backend Tier N L B Database Web Tier Browser Backend Tier Web Tier Backend Tier “That took a lot of work - and money!” “Hmmm... Most of this stuff is sitting idle...”

74. Using the Cloud for Scale Lost Business Datacenter peak load Idle time Usage Jan Apr Jul Oct

75. How can Windows Azure help?

76. #1 - Using the Cloud for Scale “Wow! What a great site!” Azure Storage Request Web Role Worker Role Browser Response

77. Using the Cloud for Scale Browser Browser Azure Storage Web Role Worker Role Browser “Server Busy” Browser Browser

79. Using the Cloud for Scale Browser Web Role N L B Browser AzureStorage Web Role Worker Role Browser Browser Web Role Browser You don’t see this bit

80. Using the Cloud for Scale Browser Web Role N L B Worker Role N L B Browser AzureStorage Web Role Browser Worker Role Browser Web Role Worker Role Browser

81. Using the Cloud for Scale Browser p1 p2 p3 Web Role N L B Worker Role N L B Browser AzureStorage Web Role Browser Worker Role Browser Web Role Worker Role Browser

82. What’s going on behind the scenes?

83. Windows Azure Your Service DNS LB Web Portal (API) LB Fabric Controller

84. Service Service Service Model Your Service DNS LB Web Portal (API) DNS config LB Service Deployment Fabric Controller

85. Your Service Service Service DNS Service Service Service Service Service LB Service Web Portal (API) LB Model Service Scaling Fabric Controller

86. Your Service Service DNS Service Service Service LB Web Portal (API) ! LB Model Service Monitoring & Recovery Fabric Controller

87. Maintenance OS 1 Guest Partition Host Partition Guest Partition Guest Partition Service 1 Bits Service 2 Bits Service 3 Bits 6 Web VHD Worker VHD Worker VHD 5 Host Differencing VHD Guest Differencing VHD Guest Differencing VHD Guest Differencing VHD 4 Enterprise base VHD Server Core VHD Server Core base VHD 2 7 3 Hypervisor Physical Server Hardware CPU, memory, disk, and network

88. Fault and Update Domains

89. On to the Case Study…

90. Project Austin delivers a next-generation, micro-community based opportunity management and collaboration experience that brings a managed feel to the unmanaged space, allowing Microsoft to observe and participate in the sales process at scale through dynamic, customer-driven collaboration. Project Austin leverages Windows Azure, CRM Services, and SharePoint Services to provide a rich set of customer and partner capabilities in the cloud while integrating with existing on-premise solutions. Project Austin significantly enhances our understanding of our customers and partners by facilitating relationships with and between customers, partners, and Microsoft, while providing data that allows Microsoft to identify and promote world-class selling techniques and content. Project Austin Vision

91. Project Goals Gain first-hand experience on Azure Cloud Storage – Security – Integration – Web – SQL Azure Explore a business scenario that leverages the promises of the cloud Provide enterprise feedback to the Azure team Deliver a working prototype in FY09 Project Austin Overview

92. Web Role Multi-Tenant; Web App; Web Service Integration Worker Role; .NET Service Bus; Siebel Data Storage Tables; Blobs; Queues; SQL Azure Live ID Integration Web Auth; Access Control Service; WIF; RPS Technical Overview

93. Community Community Micro Community Factory Community Community Community Groups Community Group A Community Group B Personalization Membership Content Personalization Membership Content High Level Services Personalization Customization Content Security Integration … Navigation Search Membership Identity Groups … Foundation Services Identity Security Storage Eventing Config Content … Micro Community Compute 93

96. Demo: Project Austin

97. (Transition to IT Evangelist…) This slide is Hidden

98. Developers build it Test locally Build package w/ Tools Upload your package to the web portal Push “deploy” Monitor, upgrade, scale… Deploying Your Service To The Cloud

99. Demo: Deployment Experience

101. IIS 7

102. FastCGI - PHP

103. Native Code

104. Full Trust

106. Have a backup plan Know how to reload the data Practice your deployments Practice your deployments again Know how to rollback as needed Lessons LearnedOperations - Deployment

107. Store startup config data in the Azure config files Retire use of web.config Use Azure tables to store shared config across instances Log to Azure tables In addition to Azure logs Must be asynch Don’t forget to close connections Lessons LearnedOperations

108. Change scale and connection config in deployed scenario

109. Demo: Adjust system for scale

110. Look at current logging

111. Demo: Access to logs

112. Upgrade a deployment

113. DEMO: Deploy V2

114. The Oh Crap moment, rolling back

115. Storage in the Cloud…

116. Windows Azure Storage Service HTTP Blobs Queues Tables Application Storage Compute Fabric …

117. Blobs stored in Containers 1 or more Containers per account …/Container/blobpath Blobs Capacity 50GB in CTP Metadata, accessed independently name/value pairs (8kb total) Private or Public container access Use Blobs for file system Blobs

118. Windows Azure Storage Service . . . Table Table Table Entity . . . Entity Entity Property Property Property Storage Accounts Name Type Value

119. Entities and properties (rows & columns) Tables scoped by account Designed for billions+ Scale-out using partitions Partition key & row key Operations performed on partitions Efficient queries No limit on number of partitions Automatic load management for hot data Use ADO.NET Data Services Tables

120. No join No group by No order by Think: relational DB partitioned to the max Not a Relational Database

121. Key Example – Blog Posts Partition 1 Partition 2 Getting all of dunnry’s blog posts is fast Single partition Getting all posts after 2008-03-27 is slower Traverse all partitions

122. Partition Key – how data is partitioned Row Key – unique in partition, defines sort Goals Keep partitions small (increased scalability) Specify partition key in common queries Query/sort on row key Keys

123. Azure Queues RemoveMessage GetMessage (Timeout) Worker Role PutMessage Queue Msg 1 Msg 2 Msg 2 Msg 1 Web Role Worker Role Worker Role Msg 3 Msg 4 Msg 2

124. Simple asynchronous dispatch queue Create and delete queues Message: Retrieved at least once Max size 8kb Queues

125. Example: Thumbnail Generator n m Worker Role Web Role LB Cloud Storage (blob, table, queue)

126. SQL Azure

127. Storage Strategy, what/when?

128. MMS/Powershell Azure Storage demo

129. SQL Azure demo

130. Resiliency / Planning to fail

131. Federated Identity

132. Companies have lots of applications

133. Each with their own silo of identity data

134. Each system is hardcoded for Az/An

135. Tedious to implement every time

136. Leads to greater risk as well

137. Many companies have 0 or n directories

138. Username & Password just isn’t enough anymore

139. An array of accounts for users

140. Intracompany?

141. Doesn’t work in the cloud

143. Framework for Claims Based Identity

144. Three geeks walk into a bar…

145. What is a Claim? Web Application/Service Username: Brian Roles: Evangelist, Speaker Email: Brian.Prince@microsoft.com IsOfLegalVotingAge: True

146. The app is no longer concerned with Authentication Storing and securing usernames and passwords Connecting to directories Managing roles/rights/claims

147. Allows for Federation

148. Basic Scenario – Active Client Directory/ Credential Store Trusted Authority (Web Service) STS Business Rules 2. Get Claims (WS-Trust) Relying Party (Web Service) 1. Get Policy Smart Client 3. Send Claims

149. Basic Scenario – Passive Client Directory/ Credential Store Trusted Authority (Web App) STS Business Rules 2. Redirect (WS-Federation) Relying Party (Web App) 1. HTTP GET Browser 3. HTTP POST

150. Federated Scenario (.NET?) (Java?) Internet Trusted Authority (Web Service) Trusted Authority (Web Service) STS Business Rules STS Business Rules 1 Relying Party (Web Service) 2 Smart Client 3

151. Delegation and ActAs Directory/ Credential Store Trusted Authority STS Business Rules 3. Get Claims for svcInv ActAs Dieter 1. Get Claims for Dieter Dieter’s Browser Back End Web Service 4. svcInv ActAs Dieter Web Front End 2. Dieter ID: Dieter ID: Dieter ID: svcInv

152. Authentication Assurance

153. Geneva Server / FX

154. Pricing/SLA

155. Purchasing Models Consumption Volume Licensing Subscription “Pay as you go and grow” “Coordinated purchasing” “Value for a commitment“ Available at launch Available post launch Select offers at launch Plans for payment predictability Discounts for commitment Low barrier to entry and flexibility Optimized for cloud elasticity Unified purchasing through EA Introduction to volume discounts

156. Pricing Model Compute Per service hour $0.12 / Hour Storage $0.15 GB / Month $0.01/10K Transactions Business Edition 10 GB Database $99.99 / Month Web Edition 1 GB Database $9.99 / Month Messages Per message operation $0.15 / 100K Bandwidth $0.10/GB inbound & $0.15/GB outbound

157. Service Guarantee Storage availability Compute connectivity Role instance monitoring and restart Guarantee Your service is connected and reachable via web Internet facing roles will have external connectivity All running roles will be continuously monitored If role is unhealthy, we will detect and initiate corrective state Storage service will be available / reachable Your storage requests will be processed successfully Technologypromise Automated Systems Management <99.95% <99.9% SLA

158. Compare to virtualization

159. Many companies are deploying virtualization

160. The cloud is just the next step

161. Many see the cloud, and want a private cloud.

162. Azure is not shippable now.

163. Dynamic Data Center Toolkit

164. Customer wins/evidence

166. Q&A

167. Collect surveys and Hand out tokens

168. GiveawaysThis slide is Hidden

169. mhester@microsoft.com brian.prince@microsoft.com blogs.technet.com/matthewms http://www.brianhprince.com @matthewhester @brianhprince © 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.