Windows Azure Pack (oblačne tehnologije u vašem podatkovnom centru) Tomica Kaniški CITUS d.o.o.

Microsoft Azure IT Admin Customers

R2 w/ Service Provider Foundation Future Services Service Bus SQL VMs Web Sites Service Plans Users Provider Portal Consumer Self-Service Portal Web Sites Apps Database VMs Service Provider Customer Self Service Portal Moves On-Premises Common Mgt. Experience Workloads Cloud-Enabled Services Move On- Premises Consistent Dev. Experience Other Services CDN. Media,, etc. Caching Service Bus SQL VMs Web Sites Worker Role Web Sites Apps Database VMs Subscriber Self- Service Portal Windows Azure Cloud OS Consistent Experiences R2

IT Admin

Customers IT Admin

In your datacenter Customers IT Admin

Windows Azure Pack In your datacenter Customers IT Admin

For service providers and enterprises Enterprise class Familiar technology On-prem connect Azure consistent Virtualization Management Service bus Easy and cost effectiveOpen and interoperable Multi-tenant cloud Web PaaS, and IaaS Templated services Standard hardware Automation VM portability Web App Portability OData Integration API Node.js, PHP, ASP.NET GitHub, BitBucket etc Linux support

Management Portal Web Platform application Services (PaaS) Infrastructure Services (IaaS) Reliable messaging Virtual Networking SQL Server and MySQL database Customers

Tenant experience Customer Service Provider Microsoft Consistent Platform ONE Homepage

Tenant experience Customer Service Provider Microsoft Consistent Platform ONE Dashboard

IT Admin Management Portal Web Platform application Services (PaaS) Infrastructure Services (IaaS) Reliable messaging Virtual Networking SQL Server and MySQL database Customers

Subscribes to Plans define Admin-Tenant relationship Creates Provisions Allocated from Restricted by Include Creates Resource Clouds Customers IT Admin

SQL Server and MySQL database Management Portal Infrastructure Services (IaaS) Reliable messaging Virtual Networking Web Platform application Services (PaaS)

Traditional machine-centric model Distributed model Web application content Application databases Configuration Internet Information Services web server Scale from machine to cloud Web Server Cloud

Platform as a service (PaaS) ASP.NET Python Classic ASP Node.js PHP SQL MySQL noSQL

Web App Gallery Customizable self-service gallery Popular web apps Database integration

Web Platform application Services (PaaS) Infrastructure services Reliable messaging SQL Server and MySQL database Infrastructure Services (IaaS) Virtual Networking

Self-service IaaS Standalone virtual machines Scalable virtual machine roles Attached to virtual network(s)

Virtual networking Physical serverPhysical network Blue virtual machine Yellow virtual machine Blue networkYellow network

Enable Remote Console Access for Tenants  VMs can be:  On isolated network/no network  Windows/Linux/No OS  Requires  RDP client supporting RD Protocol 8.1  Windows Azure Pack  Service Management Portal  System Center 2012 R2  Windows Server 2012 R2  Hyper-V  Remote Desktop Gateway

System Center and Windows Server Virtual Machines Virtual Machine Manager Features VM management. Virtual Machine Roles. Self-service VM networks. Self-service tenant administration. Extensibility for hosted cloud API. Service Management API / Service Provider Foundation Microsoft System Center 2012 R2 Windows Server 2012 R2

System Center Unified management for the Cloud OS App Controller Service Manager Service model Orchestrator Service Manager Service admin Customers Microsoft Customer Service Provider

Infrastructure Services (IaaS) Web Platform application Services (PaaS) Service Bus Virtual Networking SQL Server and MySQL database Reliable messaging

Service Bus

Reliable messaging Infrastructure Services (IaaS) Web Platform application Services (PaaS) Database Virtual Networking SQL Server and MySQL database

Reliable messaging Infrastructure Services (IaaS) Web Platform application Services (PaaS) Windows Azure Pack Extensibility Virtual Networking SQL Server and MySQL database Your custom service ?

Partner Involvement

Service Management in WAP

IT Financial Management in WAP

DEMO Windows Azure Pack

… and now the important stuff…

Key Windows Azure Pack Concepts  Resource Provider  REST API-driven service that creates and manages resource types (VMs, websites, databases)  Plans  Collections of services and quotas per service that are offered to tenants. Represents a tier of service  Users  Identities are managed via AD and ASP.NET membership. ADFS can also be set up to federate to other identities providers  Subscriptions  Users sign up for a subscription to a plan. Each subscription has a unique ID. Users can access resources (VMs, websites, databases) via their subscription.  Resource providers govern specific access controls and quota limits via the subscription  It is a billing entity that can be charged for tier of service as well as resource consumption  Add-Ons  Collections of services and quotas per service that allows users to add quotas to their existing subscriptions

Multi-tenant IaaS Cloud Architecture Stamp2 VMM Server 2 VMs Stamp1 VMM Server 1 Stamp scale unit each with management and host capacity Compute Storage Network Compute Storage Network Management Portal Service Admin Portal Tenant Portal Management Portal Tenant and Service Admin UI Service Management API Public Endpoint Tenant API Service Admin API Service Management API Governs routing and access to resources Service Provider Foundation SPF Web Server SPF DB SPF multi-tenant REST Odata API for System Center IaaS

Zero to IaaS Cloud in… 6 steps 1. Configure Fabric 2. Create & Configure Cloud 3. Configure Accounts in SPF 4. Connect Service Management API to SPF 5. Offer Plan with Cloud to Tenant User 6. Tenant Subscribes to Plan and Creates VM

Step-by-Step Configurations  Fabric Configuration  Configure / add storage resources (add / create file servers, storage providers, etc.)  Configure / add compute resources (add / create hosts)  Configure / add networking resources (add logical / VM networks, port profiles, logical switches, etc.)  Cloud Configuration  Create templates (hardware profiles / VM templates)  Create cloud  Configure SPF account permission  Test configuration

Configuring IaaS for Windows Azure Pack AdminTenant Plans Subscriptions Offers Stamps User Roles Offer User Identities Subscription Plan 1.Configure Fabric in VMM and Create Cloud 2.Create Template, HW Profile 3.Configure Accounts in SPF 4.Connect Service Management API to SPF & Register VMM server 6.Tenant Subscribes to Plan and Creates VM 5.Offer Plan with Cloud to Tenant User

Tips… (1)  install the latest updates (WAP, System Center, OS, …)  be careful with VMM UR 4 – no SQL script, but additional installation required! (DHCP)   use the SQL mixed-mode authentication…  … and ‘sa’ (or equivalent) account where possible  keep in mind the local SPF registration account  know exactly when will your service account passwords expire, and act accordingly!  things change between releases… (version == release)  don’t forget the planning phase

Tips… (2)  don’t rename machines aftewards  there is also a thing called Windows Azure Pack Express  using the preconfigured Gallery Resources  download and install Web Platform Installer (WebPI)   add Custom feed (in Options)   select Gallery Resources  download the required Gallery Resources  note that the „Readme files” are also important! 

Tips… (3)  deploying the gallery resources  Generation 1 VHD(X)!  family name, release, OS set!  VHD needs to be tagged!  data disk  family, release, OS = None  Hyper-V  optional  library share needs to be exposed to the cloud!  clouds have no capability profiles set!

Tips… (4)  add the MySQL provider  install the provider (WebPI – MySQL 5.5)  don’t forget to open the port 3306  mysql cmd:  grant all on *.* to identified by with grant option;  configure:  admin portal  add server  add group  add it to plan  use  there is no uninstaller for some things… yet!

Tips… (5)  SPF checklist  AppPool  Ensure SPF VMM IIS Application Pool identity running as domain user (not network service account)  SPF AppPool identity needs admin access to VMM and admin access on the SPF SQL DB  When using a service account as AppPoolIdentity, login to the SPF server with this account once  IIS W3WP AppPool recycles by default every 29 hours. You can customize it if desired  Local User  SPF integration with Windows Azure Pack through Basic Authentication method  Create Local User on SPF Server, add it to SPF Local Groups (VMM, Admin, Provider, Usage)  Use the Local User to register with the Azure Pack’s Service Management Portal and API (do not use a domain user)  Tenant Accounts  No need to create any tenants from the SPF PowerShell cmdlets, this is handled automatically when users sign up for a subscription.  User roles created on VMM or SPF without going through Windows Azure Pack will not be exposed on the Tenant / Admin portal

Tips… (6)  VMM checklist  add a host  create a logical network  IP pool is optional  add a network site associated with VLAN 0  create a port profile - uplink  create a logical switch  add uplink port profile to it  create a VM Network  add network to host – both switch & adapter  create a cloud  add the SPF account as a full administrator.  create hardware profiles (small, medium, large)  create a VM template  use a VHD that is bootable and has been uploaded to the library  create virtual machine on your cloud using the template to test everything

Why choose the Windows Azure Pack? Enterprise-classSimple and cost-effective Open and interoperable Builds on a familiar foundation of Windows Server and System Center. Isolated virtual networks for multi-tenant workloads. Extensibility and integration. Windows Azure code running in your datacenter. Highly scalable virtualization and management platform. Simple service delivery for multi- tenant cloud infrastructure. Out-of-box infrastructure and application service offerings. Standardized service provisioning using service templates. Automation platform. Advanced Windows Server 2012 features on standard hardware. Easy VM and Web application portability. Private, hosted and public cloud. Broad application platform support including.NET, node.js, PHP. OData REST API for portal level integration. Service Bus for asynchronous distributed application integration.

Microsoft Cloud Platform System powered by Dell Microsoft-led support and orchestrated update process Software-defined datacenter technologies for better economics Azure-consistent cloud in a box – ready to run in your datacenter

Microsoft Cloud Platform System - powered by Dell Azure-consistent Cloud in a Box Dell PowerEdge servers Dell dense Storage enclosures Dell Networking switches Tightly integrated components Windows Server 2012 R2, System Center 2012 R2, Windows Azure Pack Microsoft-designed architecture based on Public Cloud learning Microsoft-led support & orchestrated updates Optimized run-books for Microsoft applications Microsoft-led support & orchestrated updates

Pre-deployed infrastructure Switches, load balancer, storage, compute, network edge N+2 fault tolerant (N+1 networking) Pre-configured as per best practices Integrated Management Configure, deploy, patching Monitoring Backup and DR Automation Up to 8000 VM’s* and 1.1 PB of total storage Optimized deployment and operations for Microsoft and other standard workloads Cloud Platform System - Capabilities

Resources…  the-windows-azure-pack-wiki-wapack.aspx the-windows-azure-pack-wiki-wapack.aspx  windows-azure-pack-installing-amp-configuring-series.aspx windows-azure-pack-installing-amp-configuring-series.aspx    and-configuring-windows-azure-for-windows-server-part-1/ and-configuring-windows-azure-for-windows-server-part-1/  