An overview of Azure Infrastructure as a Service (IaaS)

1. Introduction to Azure
Infrastructure as a Service (IaaS)
January 2018
@directorcia
http://about.me/ciaops

2. 42 Azure regions achieving global scale
West US 2
West US
US Gov Arizona
West Central US
US Gov Texas East US
Brazil South
US DoD East
Canada Central
Central US
North Central US
UK South
North Europe
UK West
France Central
France South
Germany Central
Germany Northeast
South Africa West
South Africa
North
Australia Central 1
Australia Southeast
Southeast Asia
South India
West India
Central India
East Asia
Korea South
Japan West
Japan East
China North
Korea Central
East US 2
US Gov Virginia
West Europe
US Gov Lowa
China East
Australia East
Australia Central 2
NEWLY ANNOUNCED:
France: France Central and France South
Africa: South Africa North and South Africa West
Australia: Central 1, Central 2

3. Core Services of Azure IaaS
Compute
Virtual machines
Availability sets
VM scale sets
Storage
Disks
Blob storage
Files
Networking
Virtual networks
VPN, ExpressRoute
Load Balancer
DNS, Traffic Manager
Security &
Management
Log analytics
Backup
Site Recovery
Security Center

4. Azure
On Prem
VMs
Backup SQL
VPN
Office 365

5. Stage 1 – Connect to Office 365 and Azure
•Create an Office 365 tenant
•Add a paid Azure subscription to that tenant
•Create a site to site VPN to Azure
•Add an Azure VM as a member server in domain
•Install Azure AD Connect on member server

6. Set up Azure Virtual
Network

7. Steps
•Create a new Azure Resource Group
•Create a new Azure Virtual Network
•Change Azure Virtual Network DNS
•Create SERVER VM in Azure Virtual network

8. Azure
10.2.0.0/16
10.2.0.0/2410.2.200.0/29
Gateway Subnet
On Prem

9. Azure
ServerA
VPN
Subnet
On Prem
NewDC
Sync
Gateway

10. Select a Virtual
Machine

13. A Series - Basic
An economical option for development workloads, test servers, and other applications that don't
require load balancing, auto-scaling, or memory-intensive virtual machines
A Series – Standard
Offers the most flexibility. Supports all virtual machine configurations and features including load
balancing and auto-scaling

14. D Series
Feature SSDs and 60% faster processors than the A-series.
Ideal for apps that need faster CPUs, better disk performance, or higher RAM

15. DV2 Series
Optimized Compute: 35% faster than D series, latest generation of CPU

16. F-Series
• 2GB RAM and 16 GB of local solid state drive (SSD) per CPU core.
• Optimized for compute intensive workloads.
• Suitable for scenarios like batch processing, web servers, analytics and gaming.

17. G Series
Featuring the latest Intel Xeon processors, twice the memory and four times the Solid State
Storage of the Dv2 builds which makes this tier the ideal choice for your most demanding
applications.

18. H Series
Specifically designed to handle high performance computing workloads such as financial risk
modeling, seismic and reservoir simulation, molecular modeling and genomic research.

19. N Series
N-Series instances are enabled with NVIDIA’s cutting edge GPUs to allow you to run GPU-
accelerated workloads and visualize them.

20. Azure Premium Storage
Comes with specially designed virtual machines that use new caching technologies to provide
extremely low latency read operations to further enhance performance.
For time-critical applications, you can attach multiple persistent disks to deliver up to 64TB of
storage and more than 80,000 I/O operations per second

21. Azure Virtual
Networking

22. IPv4 and IPv6 Support
Support for multiple network interfaces for routing and
firewalls
Private and/or Public IP addresses (static or dynamic)
Network Security Groups for traffic isolation
Automatic assignment of DNS servers from virtual
network or from Azure DNS
Accelerated Networking
MAC Persistence

23. Load Balancer
Application Gateway with WAF
Traffic Manager
3rd Party Solutions from Marketplace

24. Secure site-to-site
VPN connectivity
• Connect to Azure compute
from on-premises or another
Azure region
Secure point-to-site
connectivity
• POC Efforts
• Small scale deployments
• Connect from anywhere
ExpressRoute private
connectivity
• Private connectivity from your
on-premises data center to
Azure virtual networks and
PaaS Services
VNet Peering
within region
• In-region VNet-to-VNet connectivity
• Direct VM-to-VM connectivity
• Peer VNets for routing and transit

26. Configure VM on virtual network

27. Azure Storage

29. Queues
Reliable queues at
scale for cloud
services

31. Block 1 Block 4Block 3Block 2
Image.jpg
Sparse File
512 byte aligned
512
1024
1536
2048
2560
App and Web
scale data
Backups and
Archive
Big Data from IoT,
Genomics, etc
Append Blobs
Multi-writer append only scenarios
Block Blobs
Most object storage scenarios
Page Blobs
Page aligned random reads &writes
Block 1 Block 3Block 2
Writer 1 Writer 2 Writer 3
Store and serve

32. Block 1 Block 4Block 3Block 2
Image.jpg
Sparse File
512 byte aligned
512
1024
1536
2048
2560

33. Blob REST API

34. GRS
6 replicas, 2 regions (3/region)
Protects against major regional
disasters
Asynchronous to secondary

35. NEW -
Read / write resilience against
single cluster / DC unavailability
Support for Blob, Table, File,
Queue Storage
Public Preview in Q4 CY 2017 in
multiple regions.
GA in H1 CY 2018REGION
ZONE 2 ZONE 3ZONE 1
DC4
DC1
DC5
DC2
DC6
DC3
REPLICA 2 REPLICA 1 REPLICA 3
REQUEST
Synchronous data replication across Azure Availability Zones within region
LRS
Resilient to disk/node/rack
failures
ZRS
Resilient to single cluster /
datacenter outage
GRS
Resilient to regional outage
RA-GRS
Resilient to regional outage
Read access to second region

36. Hardware Datacenter Region

38. VM storage

39. Resource Group Resource Group
Premium Storage Account

40. < 1ms latency for
cached operations
Blob Cache technology
Up to 160,000 IOPS
Industry leading
ZERO % Annual
Failure Rate
Enterprise grade
durability with 3 replicas
Best in class
High I/O
performance VMs
80,000 IOPS & 2,000 MB/s
Disk throughput per VM
Easy migration
from other
platforms
REST API support
Rich partner ecosystem

41. New
New

42. New

43. New -

44. New -

45. New - Archive Storage
New Storage Tier – Archive Storage
Cold storage for long term data
Offline data - Retrieval latency is hours
Consistent API Among Storage Tiers
Access through Blob REST API
Metadata for archive tier is always online
Blob REST API

46. New - Blob Level Tiering
Introducing Blob-Level Tiering
Individual blobs can move between tiers
All tiers co-exist in the same storage account
New API to set blob tier: SetBlobTier
Acknowledged immediately from service
Get APIs (GetBlobProperties and ListBlobs)
return current tier and archive status
New headers "x-ms-access-tier” and “x-ms-archive-
status”
Future: Automated Lifecycle Management
Blob REST API

47. Tiered Storage

48. Tiered Storage

49. Tiered Storage

50. Azure Management
and Security

51. Azure Security Center
Prevent, detect, and respond to threats
with increased visibility
Azure Log Analytics
Collect, search, and visualize machine data
from on-premises and cloud
Azure Resource Manager
Organize, deploy and control resources in
Azure
Azure Active Directory
Cloud based directory and identity
management
Azure Key Vault
Protect secrets such as passwords and keys
securely
Azure Advisor
Optimize across four different areas: high
availability, performance, security, and cost
Azure Backup
Protect your virtual machines, data, or
enterprise workloads by securely backing
it up to Azure
Azure Site Recovery
Orchestrated failovers/back to Azure, Azure to
Azure or data center to data center – great for
migration!