Exposing BizTalk
to the World
About me • Principal Integration Architect
• Microsoft Azure MVP
• MCA Cloud Platform
• ACSUG co-organizer
wsilveiranz
wagner.silveira@theta.co.nz
https://notetoself.tech
Agenda
•Exposing BizTalk to the World
•Unlocking BizTalk Endpoints
•Demos
•Take aways
Exposing BizTalk
to the World
Why we want to do that?
• Consuming on-premises resources
• Single gateway
• Extend cloud workflows
How can we do this?
• Message Exchange
• Queues/Topics
• Files
• Email
• Expose HTTP Endpoints
Unlocking
BizTalk
Endpoints
There is an Azure Service
for that…
Azure Relay Services
• Securely expose on-premises services
• No infrastructure (firewall) changes
• Bi-directional socket channel
• Two features
• Hybrid Connections
• WCF Relays
BizTalk and Azure Relays
• WCF Relays (out of the box)
• WCF-HTTPBasicRelay binding
• XML format (WCF)
• Security
• Configuration time (SAS/ACS)
• Runtime (Anon/RelayAccessToken)
• Extend using pipeline components
Scenarios & Considerations
• Expose XML based endpoints
• Fast and reliable implementation
• Consider security implications
• Shared secret can be an option
Logic Apps
• Integration Platform as a Service (iPaaS)
• Extend workflows to on-premises
• HTTP trigger
• On-premises access with OPDG
BizTalk and Logic Apps
• Out of the box
• BizTalk Adapter for Logic Apps
• Logic Apps BizTalk Connectors
• Custom Connectors
• SOAP and REST
• Security
• Logic Apps to BizTalk  Windows or
Anonymous
• User to Logic Apps  SAS Keys
Scenarios & Considerations
• Extend cloud workflows
• Leverage on-premises connectors
• XML or JSON formats required
• Think about security implications
• Can leverage from OPDG
Azure Function Proxy
• API Composition tool
• Basic functionality
• SOAP and REST (pass through)
• On premises access with Hybrid
connections
BizTalk and Function
Proxies
• No out of the box configuration
• Requires an existing Receive Location
• Configuration via Function App UI
• Consumption Plan don’t support
Hybrid Connection
Scenarios & Considerations
• Expose endpoints as a single API
• Pass through is ok
• Not using consumption plan is ok
• Alternative is firewall changes
• Set of IPs to whitelist
API Management
• Turnkey solution
• API Composition, API Gateway, Developer
Portal
• Comprehensive functionality
• SOAP, REST, REST to SOAP
• VNET Integration
BizTalk and API
Management
• Wizard based config
• From API Management (FP 1)
• From BizTalk (FP 2)
• Publishes Basic HTTP Binding Receive
Locations
• SOAP and REST to SOAP
• Requires VNET integration or firewall
changes
Scenarios & Considerations
• Expose endpoints as a single API
• Modernize solution
• Caching and Throtling
• VNET integration requires premium
• Alternative is firewall changes
• Single IP to whitelist
Hands on Time?
Take aways
Choices, choices, choices
Identify
your needs
Find the balance
References
Implementing Azure Service Bus Relays in BizTalk Server
2013 and R2 (via Mark Brimble)
https://www.connected-pawns.com/2016/03/29/azure-
service-bus-relays-sas-tokens-and-biztalk-server/

Expose BizTalk to the world (ACSUG)

  • 1.
  • 2.
    About me •Principal Integration Architect • Microsoft Azure MVP • MCA Cloud Platform • ACSUG co-organizer wsilveiranz wagner.silveira@theta.co.nz https://notetoself.tech
  • 3.
    Agenda •Exposing BizTalk tothe World •Unlocking BizTalk Endpoints •Demos •Take aways
  • 4.
  • 5.
    Why we wantto do that? • Consuming on-premises resources • Single gateway • Extend cloud workflows
  • 6.
    How can wedo this? • Message Exchange • Queues/Topics • Files • Email • Expose HTTP Endpoints
  • 7.
  • 8.
    There is anAzure Service for that…
  • 9.
    Azure Relay Services •Securely expose on-premises services • No infrastructure (firewall) changes • Bi-directional socket channel • Two features • Hybrid Connections • WCF Relays
  • 10.
    BizTalk and AzureRelays • WCF Relays (out of the box) • WCF-HTTPBasicRelay binding • XML format (WCF) • Security • Configuration time (SAS/ACS) • Runtime (Anon/RelayAccessToken) • Extend using pipeline components
  • 11.
    Scenarios & Considerations •Expose XML based endpoints • Fast and reliable implementation • Consider security implications • Shared secret can be an option
  • 12.
    Logic Apps • IntegrationPlatform as a Service (iPaaS) • Extend workflows to on-premises • HTTP trigger • On-premises access with OPDG
  • 13.
    BizTalk and LogicApps • Out of the box • BizTalk Adapter for Logic Apps • Logic Apps BizTalk Connectors • Custom Connectors • SOAP and REST • Security • Logic Apps to BizTalk  Windows or Anonymous • User to Logic Apps  SAS Keys
  • 14.
    Scenarios & Considerations •Extend cloud workflows • Leverage on-premises connectors • XML or JSON formats required • Think about security implications • Can leverage from OPDG
  • 15.
    Azure Function Proxy •API Composition tool • Basic functionality • SOAP and REST (pass through) • On premises access with Hybrid connections
  • 16.
    BizTalk and Function Proxies •No out of the box configuration • Requires an existing Receive Location • Configuration via Function App UI • Consumption Plan don’t support Hybrid Connection
  • 17.
    Scenarios & Considerations •Expose endpoints as a single API • Pass through is ok • Not using consumption plan is ok • Alternative is firewall changes • Set of IPs to whitelist
  • 18.
    API Management • Turnkeysolution • API Composition, API Gateway, Developer Portal • Comprehensive functionality • SOAP, REST, REST to SOAP • VNET Integration
  • 19.
    BizTalk and API Management •Wizard based config • From API Management (FP 1) • From BizTalk (FP 2) • Publishes Basic HTTP Binding Receive Locations • SOAP and REST to SOAP • Requires VNET integration or firewall changes
  • 20.
    Scenarios & Considerations •Expose endpoints as a single API • Modernize solution • Caching and Throtling • VNET integration requires premium • Alternative is firewall changes • Single IP to whitelist
  • 21.
  • 22.
  • 23.
  • 24.
  • 25.
  • 26.
    References Implementing Azure ServiceBus Relays in BizTalk Server 2013 and R2 (via Mark Brimble) https://www.connected-pawns.com/2016/03/29/azure- service-bus-relays-sas-tokens-and-biztalk-server/

Editor's Notes

  • #25 SOAP x REST XML x JSON Firewall x Relay based Services Where and how to secure Budget