Azure Sydney 2015 BootCamp Architecture Presentation

1. Cloud Solution Architecture
Planning for and designing
for failure
Aaron Saikovski
Readify Lead Engineer – Platform
April 2015

2. Page
Agenda
› Intros
› Design and build for Failure
› How can Microsoft Azure help?
› Demo
› Q & A
/ Copyright ©2014 by Readify Pty Ltd2

3. Page
About Me
› ReadifyLeadEngineer –Platform
› 20+yearsinthe ITindustry
› Former Microsoftie (5+yearveteran)
› Askme about Office365, AzureandAWS
› Follow me onTwitter @RuskyDuck72
› Email Aaron.Saikovski@readify.net
› MCPD, MCITP, MCTS, MCT(Alumni)
› AWS Solutions Architect -Associate

4. Page
Design and build for failure

5. Page
Overview
› Design andbuild yourapplications withfailureinmind
› Howwillyoureactandcontain the “Blast radius”?
› What types offailuresareyou expecting?
› VirtualMachine
› ServicesorWebAPIs
› Actualregionfailuresoroutages
› Tampering orunauthorised access
› Corruptdata
› Localisedorapplication wide
› Badnetworklatency?
Servicesandapplications willfail.Itshowyoureactthat’simportant!!
/ Copyright ©2014 by Readify Pty Ltd5

6. Page
Service Levels - Recap
/ Copyright ©2014 by Readify Pty Ltd6
“Gold standard”

7. Page
Business Continuity Planning
› RecoveryPointObjective(RPO):
› definedbybusinesscontinuityplanning.Itisthemaximumtargetedperiodinwhichdatamight
belostfromanITserviceduetoamajorincident.
› RecoveryTimeObjective(RTO):
› targeteddurationoftimeandaservicelevelwithinwhichabusinessprocessmustberestored
afteradisaster(ordisruption)inordertoavoidunacceptableconsequencesassociatedwitha
breakinbusinesscontinuity.
› RecoveryLevelObjective(RLO):
› definesthegranularitywithwhichyoumustbeabletorecoverdata—whetheryoumustbe
abletorecoverthewholeinstance,databaseorsetofdatabases,orspecifictables.
› MeanTimetoRepair(MTTR):
› basicmeasureofthemaintainabilityofrepairableitems.Itrepresentstheaveragetimerequired
torepairafailedcomponentordevice
(Source:WikiPedia)
/ Copyright ©2014 by Readify Pty Ltd7

8. Page
Shared Responsibility Model
/ Copyright ©2014 by Readify Pty Ltd8

9. Page
Planning for failure
› Observe the Azure SLAsesp. VMs
› Automate everything –Haveversions ofyour “Stacks”
› Iterate andimprove your cloud stacks (Think Agile)
› Decouple yourarchitecture into elastic, scalabletiers –scaleout
› Observe anyservice limits esp. network latency and
throughput
› Don’t forgetto build insecurity atALL tiers –NACLs andthe
like
› Howwilleachtierrespond to its ownorother tierfailures?
/ Copyright ©2014 by Readify Pty Ltd9

10. Page
Planning for failure..cont
› Optimise network trafficbetween the tiers –Async andqueues
› Monitor andgatherstatistics –Monitor everything!!!!
› Always assume you have beenhackedorareabout to be
› Spreadyourapplication across multiple regions
› Actually test afailure–simulate a“Game day” approach
› Always test acatastrophic failure.Youdon’t wantto test this
whenitactually happens
/ Copyright ©2014 by Readify Pty Ltd10

11. Page
Sample: Standard H/A Design
/ Copyright ©2014 by Readify Pty Ltd11

12. Page
Sample: Better/Best Design
/ Copyright ©2014 by Readify Pty Ltd12

13. Page
Common Tools
› “Ping”yourservicetiers:
› http://www.pingdom.com/
› Monitoryourapplications:
› OpsGenie-http://www.opsgenie.com/
› NewRelic-http://newrelic.com/
› Manageyoureventsandlogs:
› AzureApplicationInsights-http://azure.microsoft.com/en-us/services/application-insights/
› LogStash-http://logstash.net/
› Automateyourcloudbuilds:
› PowerShellandPowerShellDSC-http://technet.microsoft.com/en-au/library/dn249912.aspx
› Salt-http://saltstack.com/
› Chef-https://www.chef.io/
› Puppet-https://puppetlabs.com/
› Vagrant-http://www.vagrantup.com/
/ Copyright ©2014 by Readify Pty Ltd13

14. Page
How can Microsoft Azure help?

15. Page
How can Azure help?
› Most Azureservices have a99.9%+ SLA
› PricingisbilledHourly/Monthly
› Use Automation to easilyprovision services–PowerShell
› Geo-Redundancy isavailable –use it!!
› AzureWebApps +AzureTrafficManager =SLAof 99.95%
whenconfigured infailover configuration
› SQLAzurehas anduptime SLAof99.99%
› Virtual Networks canprovide isolation of yourstack andVPN
(S2S,ExpressRoute)
/ Copyright ©2014 by Readify Pty Ltd15

16. Page
Key Azure services
/ Copyright ©2014 by Readify Pty Ltd16

17. Page
Azure Storage

18. Page
Azure Storage - Overview
› Fourtypesofstorageavailable:
› Blockblob:
› streamingandstoringdocuments, videos, pictures, backups, andother
unstructured textorbinarydata.
› PageblobsandDisks:
› randomreadandwriteoperations, pageblobsareidealforVHDimages.
› TablesandQueues:
› Tables-NoSQLstorageforunstructured andsemi-structured data.
› Queues-reliable messagingsolutionforyourapps.
› Files(Preview):
› createsasharedfilesystemusingthestandardSMB2.1protocol.
/ Copyright ©2014 by Readify Pty Ltd18

19. Page
Azure Storage
/ Copyright ©2014 by Readify Pty Ltd19

20. Page
Azure Virtual Machines

21. Page
Azure VMs - Overview
› FullsupportforLinuxandWindowsmachines
› PAYGmodel–basedonanhourly/minute/monthly model
› Computetiers:
› BasicTier(A0-A4):
› Goodfordev/testworkloads
› StandardTier(A0-A7):
› Goodformostworkloads
› ComputeOptimised(D1-D14):
› SSDbacked
› 60%fasterCPUthanA-Series
› PerformanceOptimised(G1-G5):
› Intel®Xeon®processorE5v3family
› 2Xmemoryand4XtimesSSDthantheD-series./ Copyright ©2014 by Readify Pty Ltd21

22. Page
Azure VMs – Overview..cont
› Network Optimised (A8-A9):
› 40Gbit/sInfiniBand network support
› Remote direct memory access (RDMA) technology
› Compute Intensive (A10-A11):
› High-performance clusters, modeling andsimulations, video
encoding, andother compute ornetwork intensive scenarios.
/ Copyright ©2014 by Readify Pty Ltd22

23. Page
Azure VMs – High Availability
› ConfigureVMstoUseAvailabilitysetstoachieve99.95%guaranteedSLA
› GroupingVMsintoAvailabilitysetsallowsforrollingupdates
› ConfigurealoadbalancerwithAvailabilitysets
/ Copyright ©2014 by Readify Pty Ltd23

24. Page
Web Apps

25. Page
Overview
› Fast, easy to deploy enterprise scale web application
hosting platform
› Features Autoscale, A/B testing and deployment slots
› Supported .NET, Java, PHP, Python or Node.js
› Supports on-premises hybrid connections
› Available in Free, Shared, Basic and Standard editions
› Deploy code from Visual Studio Online, Git, FTP, Web
Deploy and Dropbox
/ Copyright ©2014 by Readify Pty Ltd25

26. Page
Azure Web Apps - Autoscale
/ Copyright ©2014 by Readify Pty Ltd26

27. Page
Service Tiers
/ Copyright ©2014 by Readify Pty Ltd27

28. Page
SQL Server

29. Page
Overview
› OptionofhostingSQLserveronSQLAzureoronVMs
› SQLServerAlwaysOntemplateavailableinAzureGallery
› SQLAzurealmostonparitywithtraditionalSQL
› Whichtochoose?
› SQLAzure:
› FullymanagedandeasilymanagedDBaaS.
› Massivescaleoutand“sharding”
› 500GBdatabasesizelimit
› SQLIaaS:
› Traditional SQLonWindowsVMs
› Scaleup
› Domainjoined
/ Copyright ©2014 by Readify Pty Ltd29

30. Page
SQL on Virtual Machines
/ Copyright ©2014 by Readify Pty Ltd30
SQL Mirroring to be deprecated/removed in SQL v.Next!!!

31. Page
SQL Azure Key Features
› Billed per hour regardless of usage/size
› Migration tools available e.g. SQL migration wizard
› Can use familiar SQL tools to export/import data
(.bacpac files)
› Performance measured in Database Throughput Units
(DTU)
› Mix of CPU, memory and read/write operations
/ Copyright ©2014 by Readify Pty Ltd31

32. Page
SQL Azure Key Features..cont
› Geo-replication across regions and servers
› SQL Azure uses UTC DateTime by default
› SQL Azure uses SQL authentication only -
AD/AzureAD authentication not supported
/ Copyright ©2014 by Readify Pty Ltd32

33. Page
SQL Azure – Service Tiers
/ Copyright ©2014 by Readify Pty Ltd33

34. Page
SQL Azure – Geo-replication
› Standard geo-replication
› Standard and Premium tier
› Secondary offline replica
› Offline until an outage occurs
› Billed at 75% cost of primary database
› Active geo-replication
› Premium tier only
› Max. 4 geo-replicated online secondaries
› Readable secondaries
› Billed at 100% cost of primary database
/ Copyright ©2014 by Readify Pty Ltd34

35. Page
SQL Azure – Active Geo-replication
/ Copyright ©2014 by Readify Pty Ltd35

36. Page
Checklist

37. Page
Azure Availability Checklist
› Availability checklist
› Application design
› Deployment and maintenance
› Data management
› Errors and failures
Reference:
https://github.com/mspnp/azure-guidance/blob/master/availability-checklist.md
/ Copyright ©2014 by Readify Pty Ltd37

38. Page
DEMO:
BuildingaHighlyAvailableWebApplication
(Andwatchmebreakit)
Downloadthelabfilesfromhere:
https://azbootcamp2015au.blob.core.windows.net/arch-lab2/lab2-labfiles.zip
http://bit.ly/1FfIGgn
/ Copyright ©2014 by Readify Pty Ltd38

39. Page
Slideshare:
http://www.slideshare.net/aaronsaikovski
/ Copyright ©2014 by Readify Pty Ltd39