Windows Azure Pack

(oblačne tehnologije u vašem podatkovnom

centru)Tomica KaniškiCITUS d.o.o.

tomica@kaniski.euhttp://blog.kaniski.eu/

Microsoft Azure technology

Customer Portal

Microsoft Azure

Compute, Storage, NetworkIT Admin

Customers

R2 w/ Service Provider Foundation

Future Services

Service Bus

SQLVMsWebSites

Service Management API

ServicePlansUsers Provider

PortalConsumer

Self-ServicePortal

Web SitesAppsDatabaseVMs

Service ProviderCustomer

Self Service Portal Moves On-

Premises

Common Mgt. Experience

Workloads

Cloud-Enabled Services Move On-

Premises

Consistent Dev.

Experience

Other Service

sCDN.

Media,, etc.

Caching

Service Bus

SQLVMsWebSites

WorkerRole

Service Management API

Web SitesAppsDatabaseVMs

Subscriber Self-

ServicePortal

Windows Azure

Cloud OS Consistent Experiences

R2

In your datacenter

Your datacenter

System Center + Windows Server

Compute, Storage, Network

IT Admin

In your datacenter

Your datacenter

System Center + Windows Server

Compute, Storage, Network

Tenant Portal

Customers

IT Admin

In your datacenter

System Center + Windows Server

Compute, Storage, Network

Tenant

Mgt

Auto

-m

atio

n

Reso

urc

e C

louds

Hostin

g

Pla

ns

Billin

g

Admin Portal Tenant Portal

Customers

IT Admin

Your datacenter

Windows Azure Pack

In your datacenter

System Center + Windows Server

Compute, Storage, Network

Admin Portal

Tenant

Mgt

Auto

-m

atio

n

Reso

urc

e C

louds

Hostin

g

Pla

ns

Billin

g

Tenant Portal

Customers

IT Admin

Your datacenter

For service providers and enterprises Enterprise

class

Windows Azure Pack

Windows Server + System Center

• Familiar technology• On-prem connect• Azure consistent• Virtualization• Management• Service bus

Easy and cost effective

Open and interoperable

• Multi-tenant cloud• Web PaaS, and IaaS• Templated services• Standard hardware• Automation

• VM portability• Web App Portability• OData Integration API• Node.js, PHP, ASP.NET• GitHub, BitBucket etc• Linux support

Microsoft Azure technology in your

datacenter

Management PortalManagement Portal

Web sites

Web Platform

application Services (PaaS)

Virtual machines

Infrastructure Services

(IaaS)

Service bus

Reliable messaging

Self-service user experience / OData REST API

Virtual Networks

Virtual Networking

Database

SQL Server and MySQL database

Customers

Tenant experience

Customer

ServiceProviderMicrosoft

ConsistentPlatform

ONE

Homepage

Tenant experience

Customer

ServiceProviderMicrosoft

ConsistentPlatform

ONE

Dashboard

IT Admin

Management PortalManagement Portal

Web sites

Web Platform

application Services (PaaS)

Virtual machines

Infrastructure Services

(IaaS)

Service bus

Reliable messaging

Self-service user experience / OData REST API

Virtual Networks

Virtual Networking

Database

SQL Server and MySQL database

Customers

Subscribes to

Plans define Admin-Tenant relationship

Clouds

CreatesPlans

Services

Provisions

Allocated from

Restricted by

Quota, Add-onss

Incl

ude

Creates

Resource Clouds

Customers

IT Admin

Database

SQL Server and MySQL database

Management PortalManagement Portal

Virtual machines

Infrastructure Services

(IaaS)

Service bus

Reliable messaging

Self-service user experience / OData REST API

Virtual Networks

Virtual Networking

Web sites

Web Platform

application Services (PaaS)

Traditional machine-centric modelDistributed model

Web application content

Application databases

Configuration

Internet Information Services web server

Scale from machine to cloud

Web Server Cloud

Platform as a service (PaaS)

Node.js, PHP,

ASP.NET,

ASP.NET

Python

Classic ASP

Node.js

PHP

SQL

MySQL

noSQL

Web App Gallery

Customizable self-service gallery

Popular web apps

Database integration

Web sites

Web Platform

application Services (PaaS)

Infrastructure servicesManagement Portal

Service bus

Reliable messaging

Self-service user experience / OData REST API

Database

SQL Server and MySQL database

Virtual machines

Infrastructure Services

(IaaS)

Virtual Networks

Virtual Networking

Self-service IaaS

Standalone virtual machines

Scalable virtual machine roles

Attached to virtual network(s)

Virtual networking

Physical server Physical network

Blue virtual machine

Yellow virtual machine Blue network Yellow network

VIRTUALIZATION

Enable Remote Console Access for Tenants VMs can be:

On isolated network/no network Windows/Linux/No OS

Requires RDP client supporting RD Protocol 8.1 Windows Azure Pack

Service Management Portal System Center 2012 R2 Windows Server 2012 R2

Hyper-V Remote Desktop Gateway

System Center and Windows Server

Virtual

MachinesVirtual MachineManager

VM networksVirtual MachineManager

Virtual Machine Roles

Virtual MachineManager

AutomationOrchestrator

Features

• VM management.

• Virtual Machine Roles.

• Self-service VM networks.

• Self-service tenant administration.

• Extensibility for hosted cloud API.

Service Management API / Service Provider Foundation

Microsoft System Center 2012 R2

Windows Server 2012 R2

Infrastructure provisioning

System CenterUnified management for the Cloud OS

Automation

IT service management

App Controller

Self-service

Service Manager

Service model

Orchestrator

Service Manager

Application performance monitoring

Infrastructure monitoring

Virtual Machine Manager

Operations Manager

Configuration ManagerData Protection Manager

Service

admin

Customers

Microsoft

Customer

Service Provider

Virtual machines

Infrastructure Services

(IaaS)

Web sites

Web Platform

application Services (PaaS)

Service BusManagement Portal

Self-service user experience / OData REST API

Virtual Networks

Virtual Networking

Database

SQL Server and MySQL database

Service bus

Reliable messaging

Service Bus

Reliable message delivery

Connect to on-premises applications

Queues and topics

Service bus

Reliable messaging

Virtual machines

Infrastructure Services

(IaaS)

Web sites

Web Platform

application Services (PaaS)

DatabaseManagement Portal

Self-service user experience / OData REST API

Virtual Networks

Virtual Networking

Database

SQL Server and MySQL database

Service bus

Reliable messaging

Virtual machines

Infrastructure Services

(IaaS)

Web sites

Web Platform

application Services (PaaS)

Windows Azure Pack ExtensibilityManagement Portal

Self-service user experience / OData REST API

Virtual Networks

Virtual Networking

Database

SQL Server and MySQL database

Billing System

Active Director

y

Customer Portal

Custom Service

Your custom service

?

Partner Involvement

Service Management in WAP• Request

Management in WAP• Service Catalog in

WAP• Activity

Management with automation

• Freemium licensing model

• Powered by Service Manager

IT Financial Management in WAP• Summary and

Detailed Reporting• Cost analytics• Demand forecasting• Cloud Billing• Service Pricing

DEMOWindows Azure Pack

… and now the important stuff…

Key Windows Azure Pack Concepts Resource Provider

REST API-driven service that creates and manages resource types (VMs, websites, databases)

Plans Collections of services and quotas per service that are offered to tenants. Represents a tier of

service

Users Identities are managed via AD and ASP.NET membership. ADFS can also be set up to federate to

other identities providers

Subscriptions Users sign up for a subscription to a plan. Each subscription has a unique ID. Users can access

resources (VMs, websites, databases) via their subscription. Resource providers govern specific access controls and quota limits via the subscription It is a billing entity that can be charged for tier of service as well as resource consumption

Add-Ons Collections of services and quotas per service that allows users to add quotas to their existing

subscriptions

Multi-tenant IaaS Cloud Architecture

Stamp2

VMM Server 2

VMs

Stamp1

VMM Server 1

Stamp scale unit each with management and host capacity

Compute Storage Network Compute Storage Network

Management Portal

Service Admin Portal

TenantPortal

Management Portal Tenant and Service Admin UI

Service Management API

PublicEndpoint

TenantAPI

Service Admin API

Service Management API Governs routing and access to resources

Service Provider Foundation SPF Web Server SPF DB SPF multi-tenant REST

Odata API for System Center IaaS

Tenant / Self Service User creates and operates VMs

Windows Azure Pack

Zero to IaaS Cloud in… 6 steps

Pre-step: Basic installations of VMM, SPF, Windows Azure

Pack

1. Configure Fabric

2. Create & Configure

Cloud

3. Configure Accounts in

SPF

4. Connect Service Management API

to SPF

5. Offer Plan with Cloud to Tenant User

VMM

SPF

Azure Pack

Step-by-Step Configurations Fabric Configuration

Configure / add storage resources (add / create file servers, storage providers, etc.) Configure / add compute resources (add / create hosts) Configure / add networking resources (add logical / VM networks, port profiles, logical

switches, etc.)

Cloud Configuration Create templates (hardware profiles / VM templates) Create cloud

Configure SPF account permission Test configuration

SPF

Configuring IaaS for Windows Azure Pack

Admin Tenant

PlansSubscription

s

OffersStamps

User RolesOffer

1

2

3

4

56

VMM

Service ManagementAPI

VMM

AdminPortal

TenantPortal

User Identities

Subscription

Plan1. Configure Fabric in VMM and Create

Cloud

2. Create Template, HW Profile

3. Configure Accounts in SPF

4. Connect Service Management API to SPF & Register VMM server

6. Tenant Subscribes to Plan and Creates VM

5. Offer Plan with Cloud to Tenant User

Tips… (1) install the latest updates (WAP, System Center, OS, …) be careful with VMM UR 4 – no SQL script, but additional installation required! (DHCP)

http://blog.kaniski.eu/2014/11/tip-hosts-have-needs-attention-status-after-installing-the-vmm-2012-r2-ur4/

use the SQL mixed-mode authentication… … and ‘sa’ (or equivalent) account where possible

keep in mind the local SPF registration account

know exactly when will your service account passwords expire, and act accordingly!

things change between releases… (version == release)

don’t forget the planning phase

Tips… (2) don’t rename machines aftewards there is also a thing called Windows Azure Pack Express

using the preconfigured Gallery Resources download and install Web Platform Installer (WebPI)

http://www.microsoft.com/web/downloads/platform.aspx add Custom feed (in Options)

http://www.microsoft.com/web/webpi/partners/servicemodels.xml select Gallery Resources download the required Gallery Resources

note that the „Readme files” are also important! http://technet.microsoft.com/en-us/library/dn457794.aspx

Tips… (3) deploying the gallery resources

Generation 1 VHD(X)! family name, release, OS set! VHD needs to be tagged! data disk

family, release, OS = None Hyper-V

optional library share needs to be exposed to the cloud! clouds have no capability profiles set!

Tips… (4) add the MySQL provider

install the provider (WebPI – MySQL 5.5) don’t forget to open the port 3306 mysql cmd:

grant all on *.* to 'root'@'%' identified by 'P@ssw0rd' with grant option; configure:

admin portal add server add group add it to plan

use

there is no uninstaller for some things… yet!

Tips… (5) SPF checklist

AppPool Ensure SPF VMM IIS Application Pool identity running as domain user (not network service

account) SPF AppPool identity needs admin access to VMM and admin access on the SPF SQL DB When using a service account as AppPoolIdentity, login to the SPF server with this account

once IIS W3WP AppPool recycles by default every 29 hours. You can customize it if desired

Local User SPF integration with Windows Azure Pack through Basic Authentication method Create Local User on SPF Server, add it to SPF Local Groups (VMM, Admin, Provider, Usage) Use the Local User to register with the Azure Pack’s Service Management Portal and API (do

not use a domain user) Tenant Accounts

No need to create any tenants from the SPF PowerShell cmdlets, this is handled automatically when users sign up for a subscription.

User roles created on VMM or SPF without going through Windows Azure Pack will not be exposed on the Tenant / Admin portal

Tips… (6) VMM checklist

add a host create a logical network

IP pool is optional add a network site associated with VLAN 0 create a port profile - uplink create a logical switch

add uplink port profile to it create a VM Network add network to host – both switch & adapter create a cloud add the SPF account as a full administrator. create hardware profiles (small, medium, large) create a VM template

use a VHD that is bootable and has been uploaded to the library create virtual machine on your cloud using the template to test everything

Why choose the Windows Azure Pack?

Enterprise-class Simple and cost-effective Open and interoperable

• Builds on a familiar foundation of Windows Server and System Center.

• Isolated virtual networks for multi-tenant workloads.

• Extensibility and integration.

• Windows Azure code running in your datacenter.

• Highly scalable virtualization and management platform.

• Simple service delivery for multi-tenant cloud infrastructure.

• Out-of-box infrastructure and application service offerings.

• Standardized service provisioning using service templates.

• Automation platform.

• Advanced Windows Server 2012 features on standard hardware.

• Easy VM and Web application portability.

• Private, hosted and public cloud.

• Broad application platform support including .NET, node.js, PHP.

• OData REST API for portal level integration.

• Service Bus for asynchronous distributed application integration.

Microsoft Cloud Platform Systempowered by Dell

Microsoft-led support and orchestrated update process

Software-defined datacenter technologies for better economics

Azure-consistent cloud in a box – ready to run in your datacenter

http://www.microsoft.com/cps

http://channel9.msdn.com/Events/TechEd/Europe/2014/CDP-B232

http://www.valueprism.com/resources/resources/Resources/CPS%20Price%20Performance%20Whitepaper%20-%20FINAL.pdf

Microsoft Cloud Platform System - powered by DellAzure-consistent Cloud in a Box

Dell PowerEdge servers

Dell dense Storage enclosures

Dell Networking switches

Tightly integrated components

Windows Server 2012 R2, System Center 2012 R2, Windows Azure Pack

Microsoft-designed architecture based on Public Cloud learning

Microsoft-led support & orchestrated updates

Optimized run-books for Microsoft applications

Microsoft-led support & orchestrated updates

• Pre-deployed infrastructure• Switches, load balancer, storage,

compute, network edge• N+2 fault tolerant (N+1

networking)

• Pre-configured as per best practices

• Integrated Management • Configure, deploy, patching• Monitoring• Backup and DR• Automation

• Up to 8000 VM’s* and 1.1 PB of total storage

• Optimized deployment and operations for Microsoft and other standard workloads

Cloud Platform System - Capabilities

* VM Topology - 2vCPU, 1.75 GB Ram, 50 GB Disk

Resources… http://

social.technet.microsoft.com/wiki/contents/articles/20689.the-windows-azure-pack-wiki-wapack.aspx

http://blogs.technet.com/b/privatecloud/archive/2013/12/06/windows-azure-pack-installing-amp-configuring-series.aspx

http://www.hyper-v.nu/archives/tag/windows-azure-pack/

http://technet.microsoft.com/en-us/library/dn296442.aspx

http://www.hyper-v.nu/archives/mvaneijk/2013/02/installing-and-configuring-windows-azure-for-windows-server-part-1/

http://technet.microsoft.com/en-us/library/dn469316.aspx

http://technet.microsoft.com/en-us/library/dn753720.aspx

© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.