1. Enterprise cloud architecture building blocks – Part 1
Microsoft 2016
12/16/ :35 AM
Enterprise cloud architecture building blocks – Part 1
Damir Bersinic
Chief Architect, MTC Canada
Bob Gabriel
Solution Architect, MTC Chicago
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Session objectives and takeaways
Tech Ready 15
12/16/2017
Session objectives and takeaways
Session Objectives:
Outline Microsoft’s visual architecture models and recommended approaches Determine how a customer’s current investment helps leverage the Microsoft Cloud Platform
Communicate the value of investing with Microsoft instead of other Cloud vendors
Key Takeaways:
Understand and articulate Microsoft’s architecture models at a high level
Describe how customers can integrate existing investments in architecting cloud solutions
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Microsoft Cloud Solutions and Platforms
12/16/2017
Microsoft Cloud Solutions and Platforms
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Microsoft’s Cloud Strategy
Private
Service Providers
Public
Common technologies
Common technologies
Identity
Virtualization
Management
Development
Identity
Virtualization
Management
Development
Virtualization
Virtualization
Virtualization

5. Cloud Services On Premises Infrastructure Platform Software Storage
Servers
Networking
O/S
Middleware
Virtualization
Data
Applications
Runtime
Infrastructure
(as a Service)
Storage
Servers
Networking
O/S
Middleware
Virtualization
Data
Applications
Runtime
You Manage
Platform
(as a Service)
Storage
Servers
Networking
O/S
Middleware
Virtualization
Applications
Runtime
Data
You Manage
Vendor Manages
Software
(as a Service)
Storage
Servers
Networking
O/S
Middleware
Virtualization
Applications
Runtime
Data
You Manage
Vendor Manages
You Manage
Vendor Manages

6. Pizza Services On Premises Infrastructure Platform Software
Toppings
Tomato Sauce
Cheese
Fire
Oven
Pizza Dough
Soda
Dining Table
Electric / Gas
Infrastructure
(as a Service)
Toppings
Tomato Sauce
Cheese
Fire
Oven
Pizza Dough
Soda
Dining Table
Electric / Gas
You Manage
Platform
(as a Service)
Toppings
Tomato Sauce
Cheese
Fire
Oven
Pizza Dough
Dining Table
Electric / Gas
Soda
You Manage
Vendor Manages
Software
(as a Service)
Toppings
Tomato Sauce
Cheese
Fire
Oven
Pizza Dough
Dining Table
Electric / Gas
Soda
You Manage
Vendor Manages
You Manage
Vendor Manages
Made at home
Take & Bake
Pizza Delivery
Italian Restaurant

7. Microsoft’s cloud environment
12/16/2017
Microsoft’s cloud environment
Microsoft Cloud Infrastructure & Operations (MCIO)
Software as a Service (SaaS)
Consumer and small business services
Enterprise services
Third-party hosted services
Platform as a Service (PaaS)
Microsoft IT
Infrastructure as a Service (IaaS)
Security
Global delivery
Sustainability
Infrastructure
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Your cloud

9. Microsoft SaaS Cloud Service Offerings
Taking advantage of productivity workloads provided in the cloud is a first step for many enterprise organizations.
Get started quickly.
Rich feature set is always up to date.
Frees organizations to focus IT resources on strategic applications.
Includes Microsoft Azure Active Directory tenant for use with other Microsoft cloud services.

10. Microsoft Azure IaaS
Extend your IT infrastructure to the cloud by using Azure compute, storage, and networking features and resources.
Combine Azure IaaS with Azure PaaS features as you move existing workloads to the cloud.
Create, resize, and decommission virtual machines in minutes for dev and test scenarios.
Reduce your on-premises servers and your overall datacenter costs.
Plan, size, and scale your infrastructure to support your long-term cloud adoption plans.

11. Microsoft Azure PaaS
Use the Azure PaaS open and flexible platform to quickly build, deploy, and manage cloud-enabled applications across the global network of datacenters managed by Microsoft.
Build modern applications and focus on functionality instead of infrastructure.
Build applications that are not possible on-premises.
Support for many programming languages including .NET, Java, PHP, Ruby, Node.js, Python, and more.
Choice of frameworks including .NET, ExpressJS, Rails, Zend, and more.

12. Microsoft Private Cloud
Private cloud datacenters excel at hosting services that remain on-premises to support hybrid cloud solutions. Organizations that excel with private cloud IaaS capabilities can benefit from taking this approach with a broader portfolio.
Combines Windows Server, System Center, and other Microsoft technologies to provide a private IaaS environment.
Provides the benefits of IaaS but on your terms with dedicated resources, complete control, greater potential for customization, and greater datacenter efficiency.

13. The Azure Platform HYBRID Cloud Strategy
Public Cloud Platform
Resource Providers (RPs)
IaaS, PaaS
Compute
Storage
Network
Platform Services
innovation
Continuous
Improvement Delivers
Rapid Innovation
Everywhere…
Platform
Services
Security & Management
Operations
Hybrid
Security & Management
Operations
Hybrid
SaaS
(Software as a Service)
O365, CRM, VSO etc… +
3rd Party SaaS Solutions
Resource Providers (RPs)
Compute
Storage
Network
Azure Global Datacenters
Your Datacenter Infrastructure
Microsoft Azure
Public Cloud
Microsoft Azure Stack (MAS)
Private Cloud

14. IT Efficiency with Cloud Computing
Efficiency Increases

15. The only company in all 7 Magic Quadrants and a Leader across all 7
12/16/ :35 AM
Virtualization
Cloud IAAS
Enterprise PaaS
Cloud Storage Service
The only company in all 7 Magic Quadrants and a Leader across all 7
Virtualization | IaaS | SaaS (Unified Comm, BI, Sales Force Automation) | PaaS
Business Intelligence
Social Software
Sales Force Automation
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Azure Marketplace, Partner Solutions (PAYG or BYOL)
12/16/2017
Azure Marketplace, Partner Solutions (PAYG or BYOL)
Platform Services
Security & Management
Compute
Web and Mobile
Developer Services
Hybrid
Operations
Integration
Analytics & IoT
Data
Media & CDN
Infrastructure Services
Compute
Storage
Networking
Datacenter Infrastructure (32 Regions, 28 Online)
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Networking Architecture
12/16/2017
Networking Architecture
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. “In the new cloud-based world, the network is more important than ever to IT operations. And with critical servers and data now hosted in the cloud, network traffic will only increase, as users access that data and computing resources from both remote locations and corporate headquarters. In the cloud-based world, the network in essence becomes part of the cloud.”
Cahit Aki, “Optimizing Network Performance For The Cloud,” Network Computing

19. Network Investment in the Cloud
Optimize intranet connectivity to your edge network
Optimize throughput at your edge network
For a high SLA to Azure and Office 365, use ExpressRoute

20. Networking investments
Investment area
SaaS
PaaS
IaaS
Architect reliable, redundant Internet connectivity with ample bandwidth ü ü ü
Monitor and tune Internet throughput for performance ü ü ü
Troubleshoot Internet connectivity and throughput issues ü ü ü
Design Azure Traffic Manager to load balance traffic to different endpoints ü ü
Architect reliable, redundant, and performant connectivity to Azure virtual ü
networks
Design secure connectivity to Azure virtual machines ü
Design and implement routing between on -
premises locations and virtual ü
networks
Architect and implement load balancing for internal and Internet -
facing IT ü
workloads
Troubleshoot virtual machine connectivity and throughput issues ü

21. Common Network areas for all Cloud Services
Intranet performance
Performance to Internet-based resources will suffer if your intranet, including client computers, is not optimized.
Edge devices
Devices at the edge of your network are egress points and can include Network Address Translators (NATs), proxy servers (including reverse proxies), firewalls, intrusion detection devices, or a combination.
Internet connection
Your WAN connection to your ISP and the Internet should have enough capacity to handle peak loads. You can also use an ExpressRoute connection for Azure and Office 365.
Internet DNS
A, AAAA, CNAME, MX, PTR and other records to locate Microsoft cloud or your services hosted in the cloud. For example, you might need a CNAME record for your app hosted in Azure PaaS.

22. The Big (Network) Picture
Build 2012
12/16/2017
The Big (Network) Picture
Virtual Network
“Bring Your Own Network”
Segmentation with Subnets
Full control with Routes and Security groups
Azure
Virtual Network
Users
Internet
Front-End Access
Reserved Public IPs
ACLs for security
Load balancing
DNS services
DDoS protection
Backend Connectivity
Point-to-site for dev / test
VPN Gateways for secure site-to-site connectivity
ExpressRoute for private enterprise grade connectivity
Backend Connectivity
ExpressRoute
VPN Gateways
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Azure Networking Components

24. Azure Virtual Networks
Azure Virtual Networks Connection Types

25. ExpressRoute Capabilities
TechReady 23
12/16/ :35 AM
ExpressRoute Capabilities
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. ExpressRoute for multi-national organizations
TechReady 23
12/16/ :35 AM
ExpressRoute for multi-national organizations
ExpressRoute
Connected to the set of Microsoft datacenters in the same continent
ExpressRoute Premium
Connected to the worldwide Microsoft cloud network
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Customer Network Example

28. Domain Name Resolution (DNS)
Azure assigns virtual machines the addresses of DNS servers by DHCP. DNS servers can be:
Supplied by Azure: Provides local name registration and Internet name resolution
Provided by you: Provides local or intranet name registration and either intranet or Internet name resolution

29. Azure Load Balancing Internet-facing load balancing
Randomly distribute unsolicited incoming traffic from the Internet to the members of a load-balanced set.
Internal load-balancing
Randomly distribute unsolicited incoming traffic from other Azure VMs or from intranet computers (not shown) to the members of a load-balanced set.

30. Cloud Networking for Enterprise Architects
TechReady 23
12/16/ :35 AM
Cloud Networking for Enterprise Architects
aka.ms/cloudarchnetworking
Steps you through optimizing your network's access to the Microsoft Cloud
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

31. Storage Architecture 12/16/2017
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

32. Microsoft Cloud Storage Options
Move-in Ready
Some Assembly Required
Built from the ground up

33. Azure Premium Storage High Performance Storage for VM Workloads
Ideal for I/O intensive workloads running on DS-Series or GS-Series Virtual Machines
DS-Series VM can support up to 32 data disks and deliver up to 50K IOPs
GS-Series VM can support up to 64 data disks and deliver up to 80K IOPs

34. Premium compared to Standard Storage
Backed by SSD’s instead of HDD’s
Three sizes of disks available, 128GB (P10), 512GB (P20), and 1TB (P30)
IOPs per disk vary by size of disk: 500, 2300, and 5000
Throughput per disk varies by size: 100MB/sec, 150MB/sec, 200MB/sec
Storage costs incurred based on the size of the disk instead of amount of data
Storage analytics is not supported
Key pricing tip:
Standard=Pay for what you use
Premium=Pay for what you provision

35. Azure Storage Replication
Locally Redundant Storage (LRS)
Replicates your data within the region in which you created your storage account
Zone-redundant storage (ZRS)
Only for block blobs
Replicates your data across two to three facilities, either within a single region or across two regions
Geo-redundant storage (GRS)
Replicates your data to a secondary region that is hundreds of miles away from the primary region
Read-Access geo-redundant storage (RA-GRS)
Maximizes availability for your storage account
Provides read-only access to the data in the secondary location, in addition to the replication across two regions provided by GRS

36. Geo Replication Replication Strategy LRS ZRS* GRS RA-GRS
Data is replicated across multiple facilities No
Yes
Data can be read from the secondary location as well as from the primary location
Number of copies of data maintained on separate nodes 3 6
LRS – Locally Redundant
*ZRS - Zone Redundant (only for Blob)
GRS – Globally Redundant
RA-GRS – Read Access Geo Redundant

37. Microsoft Azure Storage Recommendations
12/16/2017
Microsoft Azure Storage Recommendations
Leverage multiple storage accounts for greater scalability, either for increased size (> 100 TB) or for more throughput (> 5,000 operations per second).
Design the ability for adding additional storage accounts as a configuration change, not as a code change.
Carefully select partitioning functions for table storage to enable the desired scale in terms of insert and query performance.
Choose short column names for table properties as the metadata (property names) are stored in-band (the column names also count towards the maximum row size of 1 MB).
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

38. Microsoft Azure Storage Recommendations
When possible, batch operations into storage.
Aggressively cache information in the configuration database into a distributed cache.
If application performance or reliability is dependent on having a certain segment of data available in the cache, your application should refuse incoming requests until the cache has been prepopulated.
Partition the data in either vertically (by table) or horizontally (segment table across multiple shards) to spread the load across multiple databases.

39. Cloud Storage for Enterprise Architects
TechReady 23
12/16/ :35 AM
Cloud Storage for Enterprise Architects
aka.ms/cloudarchstorage
Steps you through the variety of cloud storage options and services in the Microsoft Cloud
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

40. Microsoft’s Enterprise Cloud Roadmap
12/16/ :35 AM
Microsoft’s Enterprise Cloud Roadmap
Resources for IT decision makers
Map of Microsoft SaaS, PaaS, IaaS, and private cloud offerings
Identity architecture
Security architecture
Networking architecture
Storage options
Deployment and integration options for Exchange, Lync, and SharePoint
Azure architecture blueprints
Cloud design patterns
Design stencils
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

41. Microsoft’s cloud Most complete cloud Most potential for integration
Hybrid works!
The Microsoft Cloud Architecture poster series is the fastest onramp for understanding the Microsoft Cloud

42. Coming up in Part 2 Architecting Identity for the Cloud
Security Architecture in a Cloud World
Hybrid Cloud Best Practices for Your Workloads
SharePoint
Exchange
Skype for Business
and so much more….

43. Please evaluate this session
12/16/ :35 AM
Please evaluate this session
Your feedback is important to us!
From your PC or Tablet visit MyIgnite at
From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

44. 12/16/ :35 AM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.