Connecting Windows Azure to Your Enterprise Network &

Applications

Takeaways from this Session

CLOUD ENTERPRISE

Data SynchronizationSQL Azure Data Sync

Application-layer Connectivity & Messaging

Service Bus

Secure Network Connectivity

Windows Azure Connect

Windows Azure Connect

Introducing Windows Azure Connect

• Secure network connectivity between on-premises and cloud

• Customer benefits and motivation

• Simple setup and management

Azure

Enterprise

Windows Azure Connect – Closer Look• Enable WA Roles for

external connectivity via service model

• Enable external computers for connectivity by installing Connect agent

• Network policy managed through WA portal

• Automatic setup of secure IPv6 network between connected role instances and external computers

Role A Role B

Role C(multiple VM’s)

Windows Azure

Enterprise

Dev machinesDatabases

Relay

Windows Azure Service Deployment

• To use Connect with a WA service, enable one or more of its Roles For Web & Worker Role, include the Connect plug-in as part of Service

Model (.csdef file) For VM role, install the Connect agent in VHD image using the Connect VM

install package Connect agent will automatically be deployed for each new role instance

that starts up

• Connect agent configuration managed through the ServiceConfiguration (.cscfg) file “ActivationToken” - Unique per-subscription token, accessed from Admin

UI

DEMO

Connecting App running on Azure with on-premise database server

Windows Azure AppFabric Service Bus

Connectivity Challenges

Client ServiceNAT

FIREWALL

Service Bus

?

Outbound, bi-

directional TCP socket

connection

Out

boun

d, b

i-

dire

ctio

nal T

CP s

ocke

t

conn

ectio

n

AppFabric Service Bus

• Provides secure messaging and connectivity across different network topologies

• Enables hybrid applications that span on-premises and the cloud

• Enables various communication protocols and patterns for developers to engage in reliable messaging

Service Bus – Usage Patterns• Connectivity – patterns for

integrating apps Service Remoting – Extend services to the cloud Cloud Eventing – Distribute event notifications

to remote listeners via the cloud

• Messaging – patterns for building scalable apps Loosely Connected Clients – Buffer messages

for asynchronous retrieval by remote clients

Service Bus – New Features• Load Balancing• Management Services• Durable Message Buffer

Service Bus

Load Balancing• Explicit

“Connection Points”

• Multiple listeners can share the same connection point

• Load balancing• Sticky sessions• Multiplexed traffic

options for connection latency reduction

Sender

Listener

Listener

SubscribeSender

<ConnectionPoint>…</ ConnectionPoint >

Management Services

• Management consistently explicit Atom Pub protocol for management

• Split management and runtime surface Two different views

Runtime URI: http://Namespace.servicebus.appfabriclabs.comManagement URI: https://Namespace-mgmt.servicebus.appfabriclabs.com

DEMO

AppFabric Service Bus – Load Balancing

Feature ComparisonCategory Connect AppFarbic

Purpose An IP-sec connection between the local machines and azure roles.

An application service running on the cloud.

Connectivity IP-sec, Domain-joint NetTcp, Http, Https

Components Windows Azure Connect Driver

Service Bus, Access Control, Caching

Usage • Azure roles connect to local database server.• Azure roles use local shared files, folders and printers, etc. • Azure roles join the local AD.

• Expose the local service to Internet. • Move the authorization process to the cloud. • Integrate with existing identities such as Live ID, Google ID, etc. with existing local services. • Utilize the distributed cache.

Which one to choose?Scenario Connec

tAppFabric

I have a service deployed in the Intranet and I want the people can use it from the InternetI have a website deployed on Azure and need to use a database which deployed inside the company. And I don’t want to expose the database to the Internet

I have a service deployed in the Intranet and is using AD authorization. I have a website deployed on Azure which needs to use this service

I have a service deployed in the Intranet and some people on the Internet can use it but need to be authorized and authenticatedI have a service in Intranet, and a website deployed on Azure. This service can be used from Internet and that website should be able to use it as well by AD authorization for more functionalities

ü

ü

ü

ü

ü ü

SQL Azure Data Sync

Introduction to SQL Azure Data Sync

On-Premises (Headquarters)

Sync

Sync

Remote Offices

SQL Azure Data Sync

Retail Stores

Sync

Sync

SQL Azure Database

Sync

Sync

SQL Azure Database

SQL Azure Data Sync – Key Features

• Elastic Scale

• No-Code Sync Configuration

• Schedule Sync

• Conflict Handling

• Logging and Monitoring

On-Premise to Cloud Sync

Sync

Benefits• Makes cloud

extension rather than replacement

• Enables moving workload to cloud in stages preserving investment in existing infrastructure

• New scenarios spanning enterprise, cloud

SQL Azure

Sync End to End Scenarios

On-Premises Applications

Sync

Sync

Sync

Offline Applications

Sync

SyncSQL Azure DatabaseSy

nc Sync

Sync

SQL Azure Data Sync

Microsoft Sync Framework 4.0

CTP available now!

Sync

Sync

Retail & Remote Offices

SQL Azure Data Sync

DEMO

SQL Azure Data Sync

Questions

ResourcesSoftware Application

Developers

http://msdn.microsoft.com/

Infrastructure Professionals

http://technet.microsoft.com/

msdnindia technetindia @msdnindia @technetindia

© 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.

The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and

Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.