4. OPTIMIZED DATA CENTER Well Managed Infrastructure & Applications CLOUD Service Oriented The Evolution Silo-ed Efficiency Host / Collocate Legacy Application Cost Reduction Re - platform Legacy / Silo Application New Requirements Re - write Additional Functionality Innovate Expand New Functionality Scalability Burst out Cloud Native Application Cloud Capability Cloud Service Expanding Legacy Platforms To Modernizing Workloads Silo-ed Architectures App 1 Expansion App 2 Expansion App 3 Expansion Managing PlatformsManaging Services On Premises Legacy App 1 Silo-ed Architectures On Premises Private Cloud Leveraged Infrastructure App 2 Leveraged Infrastructure Off Premises IaaS – SaaS - PaaS Services Service Oriented App 3 Identity Application Data OS Virtualization HW Storage Network UnixLinux MainframeWindows X Owning computestoragenetwork Consuming App Resource silo #1 App Resource silo #2 App Resource silo #3

5. * Not meant to be a comprehensive list of all services, for a complete list please visit azure.microsoft.com APP SERVICES NETWORKING & AUTOMATION SERVICES COMPUTE SERVICES DATA SERVICES So what is Hybrid … On Premises Private Cloud AutomationHealth Monitoring Site-to-Site VPN Point-to-Site VPN Express Route Azure Web Site web roles worker roles Virtual Machines Azure Mobile Services TFS or VS Online + GIT Azure AD Multi-Factor Auth Azure Cache Access Control BizTalk Services Media Services Service Bus Notification Hub Scheduler SAN Storage Spaces/SMB Server Group #1Server Group #2 VIRTUALIZATION COMPUTE, STORAGE & NETWORKING Physical Infrastructure (Servers/Storage/Networking DEVICES & FACILITIES NETWORKING, COMPUTE, STORAGE, APP SERVICES, AUTOMATION, DISASTER RECOVERY, DEV, TEST, UAT, etc. … as a SERVICE StorSimple Cloud Integrated Storage Azure Site Recovery StorSimple Virtual Appliance Backup Service Gallery OS images VHDVHD data disk MySQL database SQL Databas e SQL Data Sync HDInsight (Hadoop) storage queue storage blob storage table Virtual network AutomationCDN Availability Set Azure load balancer Auto- scale Traffic Manager File ServerExchange Active Directory My SQLOracle LOB App Commercial App SQL APPLICATIONS & SERVICES JEE App.NET App System Center Provisioning Monitoring Automation & Self Service Application Insight IT Service Management

6. Hybrid Hyper-scale Enterpris e Grade

9. Secure site-to-site VPN connectivity SMB, Enterprises SMB, Enterprises Connect to Azure compute Connect to Azure compute Secure point-to-site connectivity Developers Developers POC Efforts POC Efforts Small scale deployments Small scale deployments Connect from anywhere Connect from anywhere ExpressRoute private connectivity SMB & Enterprises SMB & Enterprises Mission critical workloads Mission critical workloads Backup/DR, media, HPC Backup/DR, media, HPC Connect to all Azure services Connect to all Azure services Internet Connectivity Consumers Consumers Access over public IP Access over public IP DNS resolution DNS resolution Connect from anywhere Connect from anywhere

10. WAN WAN

11. WAN ExpressRoute provides a private, dedicated, high-throughput network connection to Microsoft

12. Customer’s network Customer’s connection Partner Edge Traffic to public IP addresses in Azure Traffic to Virtual Networks Traffic to Office 365 Services Microsoft Edge

13. Atlanta Chicago Chicago (Gov Cloud) Dallas LA NY Seattle Silicon Valley Washington DC Washington DC (Gov Cloud)* Sao Paulo Amsterdam Dublin* London Chennai* Hong Kong Mumbai* Melbourne* Osaka* Singapore Sydney Tokyo

14. Exchange Public internet Customer site Microsoft Customer site 1 Customer site 2 Customer site 3 Public internet Microsoft

16. Dev/test labBI/big data MediaProductivity apps Storage, backup, and recovery Hybrid apps

17. Dev/test labBI/big data MediaProductivity apps Storage, backup, and recovery Hybrid apps

18. Datacenter Microsoft Azure Cloud Bursting Disaster Recovery DevTest Migration Application Analytics Long-term Retention Backup Azure Backup Azure Site Recovery

19. ESX/ Physical vCenter Hyper-V VMM On-premises Hoster Site Branch Office ESX/ Physical vCenter Hyper-V VMM ESX/ Physical vSphere Hyper-V VMM ESX/ Physical vCente r Hyper-V VMM On-premises Hoster Site Branch Office ESX/ Physical vCente r Hyper-V VMM ESX/ Physical vSpher e Hyper-V VMM

20. StorSimple Enterprise SAN storage Inline de-dupe, compression & automatic tiering Automated offsite data protection using cloud snapshots Highly efficient, location independent disaster recovery Consolidated storage and data management Data mobility for enterprise data Applications in Physical or Virtual Servers StorSimple Hybrid Storage Array Customer Data Center Azure Data Center Linux File Server VMware Server Windows File Server StorSimple Manager iSCSI Internet Azure-based Applications iSCSI StorSimple Virtual Appliance Primary Storage Archival Storage Disk-based Backup Remote Replication Tape backup and DR StorSimple Primary Storage Archival Storage Disk-based Backup Remote Replication Tape backup and DR StorSimple

21. Exchange provider facility Customer cage

22. Dev/test labBI/big data MediaProductivity apps Storage, backup, and recovery Hybrid apps

23. ExpressRoute

25. Enable Availability on Demand for SAN- based Hyper-V workloads Protect Tier 1 Hyper-V workloads to Azure, and benefit from the performance characteristics achieved by placing NetApp storage in an Equinix datacenter Azure ExpressRoute connectivity to improve throughput between storage and Azure compute. ASR’s Replication to Azure functionality is used to replicate the OS drives of the Hyper- V workload ASR’s Array-Based Replication functionality is used to mirror data between on-premises and NetApp Private Storage

26. Dev/test labBI/big data MediaProductivity apps Storage, backup, and recovery Hybrid apps

27. Collect and load big data Interactive Relational Data Streaming data AutomatedServer log files Azure blob HDInsight 10 01

28. Dev/test labBI/big data MediaProductivity apps Storage, backup, and recovery Hybrid apps

29. Persistent user data (50GB per user) Identity options Authentication RDP On-premises network Subject to IT policy via GP, System Center, or other enterprise management tools DirSync User Elastic runtime Azure VPN Custom template image Maintained via Azure Portal Corporate Apps Corporate apps Azure Active Directory Domain Joined Azure RemoteApp Windows Server Active Directory Related Sessions Fundamentals of Microsoft Azure RemoteApp Management and Administration Will My App Work on Microsoft Azure RemoteApp

31. WAN Microsoft Cloud ExpressRoute

36. ExpressRoute — Provides customer choice and includes access to all Microsoft Cloud services Internet-based connectivity Public internet Microsoft Cloud Public internet Microsoft Cloud Internet Microsoft Cloud

38. Internet Core Network Extranet Internet edge Azure Extranet / Public Peering Azure Private Peering Microsoft Peering !=

39. ExpressRoute Circuit Direct internet traffic Cross Premises Internet bound Azure service access Azure public services Internet

40. Azure Virtual Network Internet Cross-premises connectivity

41. ExpressRoute

43. Reach any Microsoft region from any continent with ExpressRoute premium add- on Traffic carried over the Microsoft core network You choose the optimal path – traffic through NSP or through the Microsoft core network

44. ExpressRoute Some applications benefit from WAN optimizers Rich application layer telemetry

45.  Voice, video, data transfers need to be treated differently  Voice and video sensitive to latency and jitter  Classify traffic and tag with appropriate DSCP value  Separate queue each traffic class Best Effort Video and Interactive Voice

46. ISO/IEC 27001 HIPAA (Healthcare) European Union Model Clause FedRAMP PCI DSS L1 version 3SOC 1SOC 2 Criminal Justice Information System China Multi Layer Protection Scheme FIPS 140-2 United Kingdom G-Cloud Life Sciences GxP Family Educational Rights and Privacy Act Singapore Multi-Tier Cloud Security Global United States Regional China CCCPPF ISO / IEC 27018 Australian Signals Directorate I-RAP Assessment Cloud Security Alliance Cloud Security Matrix

47. Datacenter extension reference architecture diagram Save time by downloading and using the interactive diagram today from http://aka.ms/derad. http://aka.ms/derad Watch the 45 minute walkthrough video at http://aka.ms/derad-video.http://aka.ms/derad-video Mouse hovers expose detailed information about each object. Finding all the information to learn how to extend your on-premises datacenter infrastructure to Azure can be time-consuming. Mouse clicks on most objects open detailed design or implementation articles about them. Includes cross Azure subscription and virtual network connections, as well as connecting them to an on-premises network.

49. 165k+ Users on Office 365 Exchange 300k System Center managed devices 180k+ Users 37k MSIT Servers in On-Prem Data Centers 717 Site locations (114 countries) 11% LOB apps run in SaaS or PaaS today 270k SharePoint Sites in the Cloud 4.5m Remote connections/ month 90k MSFT employees on Yammer 80% LOB apps in Azure in 5 years 160k Managed Windows 8.1 Systems 200k+ Unique devices connect to wireless/day 95% In the Cloud, WAP and Azure, in 5 years

50. 22gb Sustained Internet Traffic 12,055 Total Managed Network Devices

51. 3.5Gbs Sustained Hybrid Traffic To Azure 3 Azure Regions Used with ExpressRoute Legacy Apps New Apps PaaS

52. Supported Azure Regions with our Provider Edge (PE) routners MSIT Data Center with Layer 3 connection to our PE routers Layer 3 Links Layer 3 Network