In this session we'll see how to migrate an existing web application to Azure, and why it's a good choice!

1. Microsoft Azure:
Applications Migration
Paths
Lorenzo Barbieri
Cloud Solution Architect
Microsoft Western Europe
@_geniodelmale

2. Un piccolo disclaimer:
in questa sessione NON spiegherò
cosa sono e come funzionano i
servizi IaaS, PaaS, DB, etc…

3. Un caso reale: ugidotnet.org

4. Ugidotnet.org
com’era…
▪ Host Hyper-V e DNS primario ugidotnet.org
▪ Tre VM:
1. SQL Server, SQL Agent e i backup
2. UGINETServices - DNS secondario, server di
posta x newsletter e account mail ugidotnet
(webmail - mailenable)
3. Web Server - portale, blog, etc…

6. Platform Services
Infrastructure Services
Web
Apps
Mobile
Apps
API
Apps
Notification
Hubs
Hybrid
Cloud
Backup
StorSimple
Azure Site
Recovery
Import/Export
SQL
Database DocumentDB
Redis
Cache
Azure
Search
Storage
Tables
SQL Data
Warehouse
Azure AD
Health Monitoring
AD Privileged
Identity
Management
Operational
Analytics
Cloud
Services
Batch
RemoteApp
Service
Fabric
Visual Studio
Application
Insights
VS Team Services
Domain Services
HDInsight Machine
Learning Stream Analytics
Data
Factory
Event
Hubs
Data Lake
Analytics Service
IoT Hub
Data
Catalog
Security &
Management
Azure Active
Directory
Multi-Factor
Authentication
Automation
Portal
Key Vault
Store/
Marketplace
VM Image Gallery
& VM Depot
Azure AD
B2C
Scheduler
Xamarin
HockeyApp
Power BI
Embedded
SQL Server
Stretch Database
Mobile
Engagement
Functions
Cognitive Services Bot Framework Cortana
Security Center
Container
Service
VM
Scale Sets
Data Lake Store
BizTalk
Services
Service Bus
Logic
Apps
API
Management
Content
Delivery
Network
Media
Services
Media
Analytics

7. Azure Regions
7
40 Regions Worldwide
 100+ datacenters
 Top 3 networks in the world
 2.5x AWS, 7x Google DC Regions
 G Series – Largest VM in World, 32 cores, 448GB Ram, SSD…
Operational
Announced/Not Operational
Central US
Iowa
West US
California
East US
Virginia
US Gov
Virginia
North Central US
Illinois
US Gov
Iowa
South Central US
Texas
Brazil South
Sao Paulo State
West Europe
Netherlands
China North *
Beijing
China East *
Shanghai
Japan East
Tokyo, Saitama
Japan West
Osaka
India South
Chennai
East Asia
Hong Kong
Southeast
Asia
Singapore
Australia South East
Victoria
Australia East
New South Wales
* Operated by 21Vianet
India Central
Pune
Canada East
Quebec City
Canada Central
Toronto
India West
Mumbai
Germany North East
Magdeburg
Germany Central
Frankfurt
UK South
North Europe
Ireland
East US 2
VirginiaUS DoD West
US DoD West
Korea Central
Korea SouthUK West
https://azure.microsoft.com/en-us/regions
France Central
France South
South Africa
Johannesburg
South Africa
Cape Town

8. Connectivity Options to Azure
Cloud Customer Segment and workloads
Secure site-to-site
VPN connectivity
• SMB, Enterprises
• Connect to Azure compute
Secure point-to-site
connectivity
• Developers
• POC Efforts
• Small scale deployments
• Connect from anywhere
ExpressRoute private
connectivity
• SMB & Enterprises
• Connect to Microsoft services
• Mission critical workloads
Internet Connectivity
• Consumers
• Access over public IP
• DNS resolution
• Connect from anywhere

9. Connectivity Options within Azure
VNet Peering
within region
• In-region VNet-to-VNet connectivity
• Direct VM-to-VM connectivity
• Peer VNets for routing and transit
VNet-to-VNet via
gateway
• Same region or cross regions
• Connectivity via Azure VPN gateways
Cloud Cloud Segment and workloads

10. Ugidotnet.org
com’è ora…
▪ Alcune «cose» sono ancora on-premise su Hyper-V
▪ Al momento attuale:
1. SQL Elastic pool - DB del portale – Basic
2. SQL Database - DB del blog - al momento non è nel pool - S1
(standard)
▪ DB del Log - non è stato ancora migrato
3. AzureDNS – usato come DNS primario ugidotnet.org
4. Application Insight - configurata nella codebase nuova
5. BLOG in una VM perché SubText NON gira in un AppService, non
gira in modalità integrata, etc… - Basic A2
▪ Sito finirà a breve in una VM (la stessa del blog)
▪ Dischi Managed!
Chi paga i costi di Azure di UgiDotNet?
Managed Designs è Cloud Partner, usa i suoi «crediti» partner
per far girare UgiDotNet con SLA di PRODUZIONE!!!

11. Non è un «lift & shift» puro…
Come vedete il DB è già PaaS…
▪ La scelta di SQL Database al posto di SQL Server in VM è stata
semplice in questo caso:
▪ Non utilizzava feature NON supportate
▪ Il DB PaaS riduce sensibilmente i costi di amministrazione e
manutenzione

12. Why PaaS for
data stores?
If you host your database in an
Azure VM,
you are responsible for…
App Optimization
Scaling
High Availability
Disaster Recovery
Backup
Database Patches
OS Patches

13. Why PaaS for
data stores?
If you use a managed Data
Service,
you are responsible for…
App Optimization
Scaling
High Availability
Disaster Recovery
Backup
Database Patches
OS Patches
App Optimization
Focus on your app and your
business. Achieve a 406% ROI.
Let Azure Data Services
help you build, scale, and
innovate.

14. Security, privacy, etc…

15. USGov
HIPAA /
HITECH Act FERPA
GxP
21 CFR Part 11
Global
ISO 27001
SOC 1
Type 2ISO 27018
CSA STAR
Self-Assessment
Regional
Singapore
MTCS
UK
G-Cloud
Australia
IRAP/CCSL
FISC
Japan
China
DJCP
New
Zealand
GCIO
China
GB 18030
EU
Model Clauses
ENISA
IAF
Argentina
PDPA
Japan CS
Mark Gold
China
TRUCS
Spain
ENS
Industry
PCI DSS
Level 1 CDSA
Shared
Assessments
MPAA
Japan My
Number Act
FACT
UK GLBAMARS-E FFIEC
ISO 27017
SOC 2
Type 2
SOC 3
India
MeitY
Canada
Privacy
Laws
Privacy
Shield
ISO 22301
Germany IT
Grundschutz
workbook
Spain
DPA
CSA STAR
Certification
CSA STAR
Attestation
HITRUST
IG Toolkit
UK
FIPS 140-2
DoD DISA
SRG Level 2 ITAR CJIS IRS 1075Section
508 VPAT
SP 800-171
High
JAB P-ATO
DoD DISA
SRG Level 4
DoD DISA
SRG Level 5
Moderate
JAB P-ATO
Azure covers 53 compliance offerings

16. Abnormal Behavior
▪ Anomalous logins
▪ Remote execution
▪ Suspicious activity
Security issues and risks
▪ Broken trust
▪ Weak protocols
▪ Known protocol
vulnerabilities
Malicious attacks
▪ Pass-the-Ticket (PtT)
▪ Pass-the-Hash (PtH)
▪ Overpass-the-Hash
▪ Forged PAC (MS14-068)
▪ Golden Ticket
▪ Skeleton key malware
▪ Reconnaissance
▪ BruteForce
▪ Unknown threats
▪ Password sharing
▪ Lateral movement

17. MICROSOFT’S COMMITMENT
TO DATA PRIVACY & SECURITY
Cybersecurity
Privacy
Compliance
Transparency
Advocacy
Risk management
Governance

19. Ci sono «molti» casi in cui il
Compute deve rimanere in una VM
▪ Configurazioni «particolari», vedi SubText che non gira
in modalità integrata, oppure componenti da installare
per forza in GAC, uso di servizi Windows custom,
oppure indicizzatori custom per i file (che mi
impediscono ad esempio di usare Azure Search),
oppure devo usare Azure Files come share, etc…

21. Ugidotnet.org
come sarà…
▪ Il nuovo sito verrà messo direttamente su AppService con
caratteristiche «simili» alla VM del blog attuale.
▪ Verrà eliminato SubText e i blog verranno migrati a WordPress
installandolo in un AppService e sfruttando MySQL
«managed».
▪ SendGrid per newsletter per avere feature di tracking
aggiuntive, la mail verrà migrata (O365 «community»)
▪
▪ Oggi DB accessibile da Internet, a tendere ha senso configurare
un AppService Environment con una VNET per isolarlo.

22. Using the «real power» of
the Cloud

24. Complex scenarios are «mixed»
▪ IaaS «starting point» completely migrated or simply extended with API
apps, security, network isolation, Logic Apps and/or Functions, single
sign-on and/or Azure Active Directory integration for authentication and
authorization, etc…
▪ PaaS «extensions» to existing solutions like:
▪ AI, Cognitive Services and Machine Learning
▪ Big Data and IoT
▪ PowerBI and PowerBI embedded
▪ Bots
▪ Application Insight
▪ CDN and Media Services

25. ▪ API Apps/Swagger
▪ Functions
▪ Azure AD
▪ Etc…
Si «estenderà» una soluzione «IaaS» .NET o
Node.js/Linux con alcuni servizi «PaaS»
Venite al prossimo evento per provare uno
dei Cloud Application Development Lab
con il nostro supporto…

27. Extend on-premises data and apps
Application
Availability
Bottomless
Storage
Identity
Management
Full hybrid
applications
INFRASTRUCTURE
Azure Site Recovery
Azure Backup

28. Deploy to the cloud on-premises
Microsoft Azure Stack
Azure IaaS | Azure PaaS
Compute | Networking | Storage
App Service | Service Fabric
Cloud-inspired
infrastructure
Portal | PowerShell |
Dev-ops tools
Azure Resource Manager
Microsoft Azure
Azure IaaS | Azure PaaS
Cloud infrastructure
Portal | PowerShell |
Dev-ops tools
Azure Resource Manager
Azure services in
your datacenter
Unified app
development
One Azure
ecosystem

29. A «familiar»
environment!

30. An «extreme»
scenario!

31. Thank you!
Lorenzo.Barbieri@Microsoft.com