The document discusses enterprise architecture for SharePoint with extreme measures. It describes designing a highly available and disaster recovery SharePoint farm across multiple servers. The presentation covers platform and application design, authentication, load balancing, and improvements like zero downtime patching. It emphasizes the importance of documentation for farm configuration, security, provisioning, and known issues for support. The presentation also discusses integrating SharePoint with Office 365 and Azure.

1. Enterprise architecture with extreme measures
Tome Tomovski
10.12.2017 https://www.meetup.com/de-DE/Office365-Meetup-Graz/
Beyond the limits of
SharePoint

2. Beyond the limits of SharePoint
Enterprise architecture with extreme
measures
TOME TOMOVSKI
SPEAKER, MCT, ARCHITECT
SP SATURDAY NEW YORK, JULY 29, 2017

3.  Step by step chaos
 Use case
 Design overview
 Platform and applications
 How to design a SharePoint foundation
 Security & authentication
 Anticipate and prepare for issues
 What is a best practice?

4. SharePoint paradise

5. SharePoint problems

6. SharePoint disaster

7. SharePoint hope

9. SharePoint architecture case
SP2013
STAGES
DEVINT
TEST UAT
PROD
350+
SERVERS
INT + TEST UAT + PROD
SP2016
INTERNAL
EXTERNAL
INTERNAL
EXTERNAL
100
SERVERS
High
Availability
Disaster
Recovery
Patching &
Backups
Governance

11. Platform design
INTERNAL NETWORK
EXTERNAL SECURE HOSTING
Identity
Reporting
Monitoring
Internet
MPF ESF ASF
DB Cluster
WFE
APP
APPHOST
APP
OWA Service apps
*App
specific
topoloygy
DB Prim DB MirrorDB Witness
MPF ESF ASF
WFE
APP
APPHOST
APP
OWA Service apps
*App
specific
topoloygy
AD FS
 Farm solutions
 Provisioning
 ADFS authentication
 Load balancing
 SSL certificates and
bindings
 Tokens
 RER
implementations

12. Load balancing configuration
 Integrated mode
 Request management
service running on each Web
role server
 Dedicated mode
 Request management
service running on separate
servers in the farm

13. Load balancing configuration

14. Architecture Improvements
Zero downtime patching
PHAI design
What to remove / update / redesign:
 Farm solutions
 Sandbox solutions
 Server side code (replace with REST or CSOM)
 Host PHAI
 Use distributed cache on Web role servers, separate search
 One Drive API (REST, .NET, Java) for easy content management

15. WHAT TO DOCUMENT ?
Platform
Architecture
Environment
setup
PowerShell
configuration
Information
Logical
Physical + Search
PowerShell / DSC
Farm configuration
Security
Connectors
Web Apps provisioning

16. IF YOU FAIL TO PLAN
YOU PLAN TO FAIL!

17. Know hows
 Authentication problems
 Certificate and host header + DNS
 RER configuration
 Add to site/lists, update old SC
 Dynamic IP restriction in IIS, IP addresses that
access WCF service
 Certificate revocation problem
 IIS security for PHAI

18. Know hows
 User profile synchronization with external accounts
 App catalog not reachable
 DNS problem, DNS records, Subscription service
application configuration, App management
application service
 SharePoint Context and Token lifespan
 LB + VIP + secure ports, Service accounts

19. Office 365 SPO + Azure
 User profile synchronization with external accounts
 App catalog not reachable
 DNS problem, DNS records, Subscription service
application configuration, App management
application service
 SharePoint Context and Token lifespan
 LB + VIP + secure ports, Service accounts

21. @ttomovski ttomovski ttomovski

22. Thank you
@ttomovski ttomovski ttomovski