Microsoft Azure Infrastructure Services Move your infrastructure to the cloud Kaido Jarvemets Senior Consultant Trevor Sullivan Founder, Art of Shell

pcgeek86 Microsoft MVP 12 years Beer, motorcycles, guns, code kaidja Microsoft MVP Experience Favorite something; e.g., food Trevor Sullivan Kaido Jarvemets

What We’ll Cover Architectural overview Azure IaaS resource types What is Azure Resource Manager (ARM)? Azure Resource Manager Tooling IaaS Deployment approaches

Infrastructure OverviewInfrastructure Overview

Azure Virtual Machine Architecture Azure Subscription Resource Group Virtual Network Subnet (Database) Subnet (Web)

Supported Operating Systems

Virtual NetworkingVirtual Networking

Virtual Network Azure Subscription Resource Group Virtual Network Subnet Name: ArtofShell Location: West Europe Address Space: /24, /24 Name: Database Address Space: /25 Subnet Name: Web Address Space: /25 Public IP Address

Network Security Groups Virtual Network Subnet (Database) Subnet (Web) Azure Subscription Resource Group Network Security Group (Database) Network Security Group (Web)

VPN Gateway Azure Subscription Resource Group Virtual Network Name: ArtofShell Location: West Europe Address Space: /24, /24 Customer Data Center Location: Paris, France Address Space: /24

Virtual Network Recommendations Apply Network Security Group (NSG) to subnet to simplify management Reduce the number of Virtual Networks in your design

Demo Virtual Networking

Storage

Virtual Machine Storage Operating System Disk Data Disks Temporary Disk Virtual Machine size determines how many data disks can be attached.

Premium Storage Deployed using a different Storage Account Type Low-latency, high-throughput storage Supported by DS, DSv2, GS Series Virtual Machines Designed for Virtual Machines, not intended for general storage Doesn’t support custom domain names Rigid price / performance tiers Azure Subscription Resource Group Storage Account (Premium_LRS)

Azure Encrypted VMs By default every deployed VM is with unencrypted disk(s) Supported Windows and Linux OS Integrated with Azure Key Vault Stores encryption keys and secrets

Demo Azure Storage

Virtual MachinesVirtual Machines

Virtual Machine Sizes ClassificationDescription A SeriesBasic VM for lower volume workloads, and non-interactive use. D Series60% faster CPU, than A Series, with a SSD temporary disk Dv2 Series20% faster CPU than D Series, with SSD temporary disk G SeriesDesigned for large workloads N SeriesSpecialized virtual machines for GPU-intensive workloads. Get-AzureRmVmSize –Location WestUS | Out-GridView azure vm sizes --location westus

Deployment Automate deployment of cloud resources using PowerShell and xPlat CLI

Azure Quickstart Templates Pre-built templates Example-driven deployment Fork and modify File issues and requests

Microsoft Visual Studio Code Free software Cross-platform (Mac, Linux, Windows) Supports JSON Schema Syntax highlighting Custom themes Git integration Custom task runner Azure Resource Manager (ARM) Extension Install from Visual Studio Marketplace Resource auto-completion

Microsoft Visual Studio Microsoft Azure SDK Supports JSON Schema Visual view of JSON Templates Resource Explorer Syntax highlighting Resource auto-completion Source control integration

Resource Explorer Available in the Azure Portal Lists Resource Groups & resources Lists resources by Resource Provider

Azure PowerShell PowerShell Gallery Developer Workstation Azure Resource Manager (ARM) Build Server Install-Module –Name AzureRM –Scope CurrentUser

Azure xPlat Node Package Manager (npm) Developer Workstation Azure Resource Manager (ARM) Build Server npm install -g azure-cli

Demo Deploying Azure Virtual Machines

Azure AutomationAzure Automation

Azure Automation Runbooks Execute scheduled tasks in the cloud Perform VM maintenance Create / verify / test backups

Azure Automation DSC Cloud based PowerShell DSC Pull Server You can onboard on-premise and Azure VMs Windows or Linux

Demo Azure Automation

Azure AD B2BAzure AD B2B

Azure AD B2B Azure AD B2B allows you to access corporate applications from partner-managed identities SaaS, Office 365, Salesforce, Azure Services You can send out invitations to external partners It is based on an invite and redeem model Your business partners can use their own credentials No need to manage separate directory

Demo Azure AD B2B

Azure Recovery ServicesAzure Recovery Services

Azure Recovery Services Two different services Azure Site Recovery Orchestrated Keep a replica of the entire server infrastructure Azure Backup Simple agent or Azure Backup Server

Demo Azure Recovery Services

Presentation Just a placeholder slide. Please use the example slides in the “Template Example Slides” Section. Questions?

And Then …

Section HeaderSection Header This is the next section

Title Line1 Line2 Line3 Line4 Line5 Line6 Bullet Level 1 Bullet Level 2 Bullet Level 3

Title Code

Text Only with Border Level 1 Level 2 Level 3

Text Only without Border Level 1 Level 2 Level 3

Title Text 1 Level 1 Level 2 Level 3 Text 2 Level 1 Level 2 Level 3

Section 1 Text Level 1 Level 2 Level 3 Section 2 Text Level 1 Level 2 Level 3 Title

Demo Demo Title