Partner Practice Enablement - Overview This session will focus on integration strategies for applications deployed using Microsoft Azure Websites and Microsoft Azure Cloud Services. Learn how to securely consume services in a virtual machine from your applications. Audience: IT Professionals, Architects and Developers Module 1 – Introduction to Microsoft Azure Module 2 – Microsoft Azure Virtual Machines Module 3 – Microsoft Azure Networking Module 4 – Microsoft Azure Active Directory Module 5 - Cloud Services and Websites Module 6 - SQL Server and SharePoint Module 7 - Management and Monitoring

Cloud Services, Websites and Infrastructure Services

Agenda Microsoft Azure Compute Virtual Machines and Cloud Services Virtual Machines and Websites Azure Websites for IT Professionals

Microsoft Azure Compute

Why Integrate? Application Dependencies Allows development of new applications or migration of existing applications that have dependencies on resources that require virtual machines such as SQL Server, Mongo DB, Oracle etc... Hybrid Connectivity Using Microsoft Azure Virtual Networks to connect to on-premises resources allows for line of business applications hosted in Microsoft Azure.

Cloud Services

Workloads for Cloud Services Workloads that are designed to be stateless and can be easily scaled to multiple instances N-Tier Applications are well suited because Cloud Service has superb support for cross role communication and discovery. Your choice of language and frameworks as long as it runs on Windows. Workloads that can be deployed in an automated fashion

Microsoft Azure Service Model Example cloud service configuration with a single web role and a single worker role

VIP Swap

Mixing Virtual Machines & Stateless Roles Multiple cloud services with stateless and virtual machines

Virtual Machines and Cloud Services Side by Side Direct Connectivity Using Virtual Networking For advanced connectivity scenarios such as Active Directory or DCOM Connect Cloud Apps via VIPs Easily compose services by connecting public endpoints

Connecting Cloud Services via VIPs Strengths Simplicity Tenant Autonomy Easy Local Dev/Test WA Web Role Cloud Service 1 Cloud Service 2 SQL Server

DEMO Cloud Services VIP Connectivity

Connecting Cloud Services with VNET Strengths Lower Latency Protect VMs from the open Internet Advanced Connectivity Requirements Direct Access via VNET FrontEndSubnet ( /16) SQLSubnet ( /16) WA Web Role Cloud Service1 Cloud Service 2 AD SQL Mirror AD Subnet ( /16) ContosoVNet ( /8)

DEMO Cloud Services Virtual Network Connectivity

Websites

Creating a Web Site Using the Azure Management Portal

Publishing Web Sites FTP FTP Client (ie: FileZilla) Visual Studio Web Deploy Visual Studio Git Usually Automated via Service Hooks

Automating Web Site Deployment Publishing with Command Line Tools MSBuild FTP Scripts PowerShell Cross-Platform Command Line Interface (CLI) Web Deploy Command Line Publishing from Source Control Generally to a staged deployment slot…

Deployment Slots A separate web site linked to your primary web site. Each deployment slot has it’s own URL and runtime environment.

Staged Publishing Publish updates to your web site into the staging deployment slot. Run and Test in the Staging slot. Instantly Swap the Staging and Production Slots “Go Live” “Oops!”

Publishing From Source Control Git or Mercurial repositories are supported.

Connecting Websites via VIPs Strengths Access any backend that can be hosted on a virtual machine. Access on-premises resources using virtual machine hosted in virtual network. Cloud Service SQL Server Website

LAB Websites with VIP Connectivity

Custom Domains and SSL for Azure Websites

Custom Domains.azurewebsites.net Custom

Configuring Custom Domains DNS Registrar Add A or CNAME Record(s). Azure Management Portal In domain names section of the configure page for the web site. Click the manage domains button. Add domain name(s)

SSL with Azure Web Sites SSL Provided by Default SSL with Custom Domain Requires Standard Mode SSL Bindings Server Name Indication (SNI) SSL Modern Applications and OS’s capable of using SNI SSL Multiple domains can share the same IP Address IP Based SSL Traditional SSL that supports older applications and OS’s One domain per IP Address

Configuring SSL in Azure Web Sites Obtain certificate(s) from a Certificate Authority. Upload Certificate(s) to Azure..pfx with password Configure SSL Bindings.

IP Based SSL Considerations Dedicated IP Address (inbound) Assigned to the Web Site. Can be retrieved in the quick glance section of the DASHBOARD page of the web site. Not the same as the Load Balancer IP Address used when configuring the A Record for a custom domain. A Record must be updated to use this Virtual IP Address.

Scaling Websites

Scaling Options SMALL 1 CORE 1.75 GB MEMORY 1 GB STORAGE MEDIUM 2 CORES 3.5 GB MEMORY 10 GB STORAGE LARGE 4 CORES 7 GB MEMORY 50 GB STORAGE For more information on websites options

Websites Scalability

Backup and Restore Websites

Backup and Restore Feature Provides back and restore services for your web site and linked resources (databases). Requirements Standard Mode An Azure Storage Account (same subscription the web site is deployed in) Backups are stored in Blob storage.

Website Backup How Backups are Initiated Manual or Automated Content Included in the Backup Website configuration Website files (content) Linked Resources (SQL Database, MySQL) How Backups are Stored Azure Storage Account (blob) Container name: “websitebackups” A backup consists of a.ZIP file (the backup) and a.XML file (the manifest for the.ZIP).

Website Restore Website Restore Targets Current Website Existing Website is overwritten New Website Creates a new Website in the same region as the original. Website name is “restored-originalWebsiteName” Database Restore Targets None Restore to a different database server Restore to the original database

Site Control Management (“Kudu”)

What is “Kudu”? A Separate Companion/Administrative Web Site to your Web Site Your Web Site: Kudu Web Site: Authentication Only the owner of a Web Site can Access the Kudu Site Use Credentials Associated with your Microsoft Azure Subscription Every Web Site gets a Kudu Site by Default Including Staging and Production slots Security Context contoso Cloud Drive APP SETTINGS CONNECTION STRINGS ENVIRONMENT VARIABLES SERVER VARIABLES SYSTEM INFORMATION kudu

More About Kudu Developed as an Open Source Project Contribute to it or host your own Kudu is a “Site Extension” An Extension to your Web Site It has access to the file system and runtime environment of your Web Site

Web Site Extension Gallery

Summary Microsoft Azure Compute Virtual Machines and Cloud Services Virtual Machines and Websites Azure Websites for IT Professionals

Suggested Learning Exercises AssignmentEstimated Time Hands-on Labs and Tutorials Connecting a PaaS application to an IaaS Application Connecting a PaaS application to an IaaS Application with a Virtual Network Deploying a.NET Website with a MongoDB Backend on a VirtualDeploying a.NET Website with a MongoDB Backend on a Virtual MachineMachine store-data-mongodb-vm/ 45 minutes Video IaaS + PaaS = <3 Microsoft Azure Websites 1 hour

Session Resources Microsoft Azure Virtual Network Overview Instructor Led Training – Microsoft Azure for IT Professionals and Developers Network ACL Capability in Microsoft Azure PowerShell capability-in-windows-azure-powershell/

Microsoft Azure Resources Microsoft Partner Learning Path Microsoft Azure Friday Microsoft Virtual Academy Channel 9 Microsoft Azure Questions

Coming Up Next... SQL Server and SharePoint

Thank You