Planning and Operating Azure Stack

How to handle a unicorn?

Jakob Gottlieb Svendsen

Principal Consultant &

Chief Developer

• 10 years in Automation Consultancy

• 15+ years in IT Co-Founder Cloud & Datacenter User

Group

Cloud & Datacenter MVP

@JakobGSvendsen

Win!

Win!

Win!

Andreas Sobczyk

Global Senior Consultant

• Azure

• Azure Stack

• Software-defined Datacenter

• Automation

Co-Founder Cloud & Datacenter User

Group

Blog:

CloudMechanic.net

@Andreas_Sobczyk

Azure Stack is an extension of

Azure. It brings the agility and

innovation of cloud computing

to on-premises environments.

Organizations can now build

modern applications across hybrid

cloud environments with the right

flexibility and control.

Azure and Azure Stack

Azure Stack

Azure IaaS | Azure PaaSCompute | Networking | Storage |

App Service | Functions |

Service Fabric* | Container Service*

Cloud infrastructure

(Integrated systems)

Portal | PowerShell | DevOps tools

Azure Resource Manager

Azure

Azure IaaS | Azure PaaS

Cloud infrastructure

Portal | PowerShell | DevOps tools

Azure Resource Manager

Developers

IT

Consistency

* - H1 2018

Truly consistent hybrid cloud platform

Azure Roles

use

operateuse

operateAzure Stack instance

Cloud Architect

Cloud Operator

DevOps

Cloud Administrator

Virtual Machines +

VM Scale Sets

Networking Storage

Azure IaaS and Paas available in your datacenter

Azure Functions Azure Service Fabric

Azure Container Service

Azure App Service

MS SQL MySQL

Cloud Foundry

Fully consistent - no configuration required

Fully consistent - configuration required Fully consistent – deployed with templates

Not consistent - configuration required

Hybrid use cases: Azure and Azure Stack

Edge and disconnected

solutions

Cloud applications that meet every regulation

Maximize performance and data

transmission

Modern applications across cloud and on-

premises

DEMOAzure Stack Portal

Over time, we will add additional partners and hardware configurations.

Azure Stack integrated systems

Azure Stack planning touchpoints

Sizing

• Compute

• Storage

• Memory

Scaling

1. Ecosystem of apps

2. One Cloud “endpoint”

3. Several Regions

4. Multiple scale units per region, each scale unit can be different generation hardware

5. Smallest scale unit = 4 x servers

1

…………

Copenhagen Oslo Stockholm

……

4 4 4

3

Po

rtal /

Azu

re R

eso

urc

e

Man

ag

er

Resource management

2

5

Deployment option

Connectedor

Disconnected?

Azure AD or

ADFS?

ADFSCapacity-based

Billing

Azure ADPay-as-you-go

or Capacity-based?

Comsumtion-based Billing

Connected

Disconnected

Identity provider

• Azure Active Directory (AAD)

• Requires internet connectivity

• Supports multi-tenancy

• Active Directory Federation Services (AD FS)

• Required on disconnected scenario

• No multi-tenancy

• Requires offline Marketplace sync

Network – Internals

Network – Datacenter connection

Edge Edge

EBGPEBGP

Region

ToR Switch

ToR Switch

...Scale Unit

ToR Switch

ToR Switch

...

Scale Unit

Infrastructure and Private VIP connectivity

BGP or Static Routing

Network - Edge Firewall

Network – Enterprise (intranet or DMZ)

Azure Stack Licensing Model

• Azure Stack is licensing is like Azure• Microsoft has tried to keep the business model as consistent as possible

between Azure and Azure Stack

• Both Azure and Azure Stack are designed as a “pay-as-you-use” system

• Designed to charge for services used

• Units of monetization are the same

• Pricing of Azure Stack services is reflective of a shared cost-of-ownership

Azure Stack

Hosted and On-premises

• Extension of Azure business model

• Fee for consumption: only pay for services running on Azure Stack

• No upfront licensing fees: don’t pay until you use the service

• Simple bill management• One invoice with public Azure• EA deployments consume same

monetary commit as public Azure

• Available in EA and CSP channels

Pay-as-you-use model

• Only option for disconnected scenarios: no usage metering or connection to commerce

• Fixed fee, annual subscription: based on number of physical cores with unlimited IaaS for licensed cores

• License all physical cores on a stamp, with unlimited IaaS rights

• Separate transaction from Azure: cannot use monetary commit, different billing

• For disconnected scenarios

• EA channel only

Capacity model

Azure Stack

Hosted and On-premises

Capacity model pricing

App Service Package

400$/core/year

IaaS Package

144$/core/year

• Includes: App Service, Base VM, Azure Storage

• Must license all physical cores on the stamp

• Windows Server and SQL Server are BYOL (on-premises license)

• Base VM, Azure Storage only

• Must license all physical cores on the stamp

• Windows Server and SQL Server are BYOL (on-premises license)

Azure Stack Operators touchpoints

Plans and Offers

Quotas Plan #1 – VMs

Compute

Storage

Network

Services

Compute

Storage

Network

AppService

…..

Offer #2 – IaaS

and Web

Base

Plan #1

Add-On

Plan #2

Add-On

Plan #3

Plan #2 – Increase

Compute quota

Compute

Plan #3 – Web

AppService

Compute

Quota – small

Compute

Quota – large

Storage

Quota

Network

Quota

AppService

Quota

Offer #1 – IaaS

only

Base

Plan #1 User 1

user1@CTGlobal.

com

User 2user3@CTGloba

l.com

Subscription

1

Subscription

2

Subscription

3

User 3user2@CTGlobal.

com

Backup - Infrastructure

Backed up items:• Azure Resource Manager configuration user data, such as subscriptions, plans,

offers, and quotas for storage, network, and compute resources• RBAC policy assignments and role assignments • Internal identity and federation systems• Root certificates used by internal certificate authority• KeyVault secrets and vaults

What isn’t backed up:

• IaaS or PaaS workloads

• Storage accounts

• HLH

• Physical Network config

Backup - Infrastructure

Backup Azure Stack to SMB share

Share structure

\\AZbackup01\AzSBackups\contoso.com\nyc\MASBackup

\\AZbackup01\AzSBackups\contoso.com\nyc\HLH

\\AZbackup01\AzSBackups\contoso.com\nyc\Switches

\\AZbackup01\AzSBackups\contoso.com\nyc\DeploymentData

\\AZbackup01\AzSBackups\contoso.com\nyc\Registration

Backup - Workloads

Azure Backup

Azure Site Recovery

Third-party

Monitoring

Log Analytics

Azure Monitor

SCOM

Nagios

Privileged endpoint

#Start ERCS Session

$cred = Get-Credential

$session = New-PSSession -ComputerName <IP_address_of_ERCS> `

-ConfigurationName PrivilegedEndpoint -Credential $cred

#End ERCS Session

Close-PrivilegedEndpoint

# Prompts to specify path for the transcript to be saved.

Updates

Monthly update 2-3 weeks after patch Tuesday

Download

Apply

Monitor

Resource Providers

• Compute

• Storage

• Network

• AppService

• MS SQL

• MySQL

Compute, Storage, network

Compute

Capacity or servers

Storage

Capacity or servers

Network

Public ranges

AppService RP

Mobile Apps API AppsWeb AppsAzure

Functions

App Service on Azure Stack Developer experience

• Languages and frameworks

• Superior DevOps

• Self-service supportability

Fully managed platform

• Auto scale

• Framework patching

• Load balancing

Enterprise-grade

• Service configuration

• Troubleshooting

• Metrics

AppService RP – Planning

Deployment Requirements

A high-available Fileserver

A high-available SQL Server

Certificates

AppService RP – Operating

SKUs

Are standard SKUs enough?

Worker Tiers

Do I need more workers?

Custom Software

Do you need software installed on all new workers?

Pricing

Do I need to show custom price to tenants?

MSSQL & MySQL RPs

Not ”real” resource providers, but more a adapter

Provides ability to present a SQL database through a public endpoint in Azure Stack

SKUs

Hosting Servers

Marketplace

Marketplace Syndication

Custom Marketplace Items

EvOps

Try it out!Single Node POC

x3650 M5 2U or x3550 M5 1U

Rack N/A – POC ONLY – Non-

Production

Compute 1 – x3650 or x3550 M5 server

2x Intel CPU’s 16 cores (total)

128GB RAM Rec.

NIC certified for WS 2012 R2

Expandabilit

y

Not applicable

Performance Not applicable

Management XClarity Administrator or Pro

(optional)

Storage 5 SSDs

1 – OS disk (min 200GB)

4 – Data Disks (min 250GB)

(all available disks will be used)

Network Not applicable

Software Microsoft Azure Stack

Development Kit

Included N/A

Why Lenovo Balanced, engineered solution; #1 Reliability, #1 Customer Satisfaction, Light Path Diagnostics, XClarity (no agent, open, APIs / Powershell)

Questions?

Expo Sponsors

Event Sponsors

Expo Light Sponsors