33
THE ULTIMATE SHAREPOINT 2013 INFRASTRUCTURE BEST PRACTICES SESSION Michael Noel - CCO

Ultimate SharePoint 2013 Infrastructure Best Practices Session - SPKSLO 2012

Embed Size (px)

DESCRIPTION

As presented at the SharePo

Citation preview

  • 1. Michael Noel - CCOTHE ULTIMATE SHAREPOINT 2013INFRASTRUCTURE BESTPRACTICES SESSION
  • 2. Michael Noel Author of SAMS Publishing titles SharePoint 2007 Unleashed, the upcoming SharePoint 2010 Unleashed, SharePoint 2003 Unleashed, Teach Yourself SharePoint 2003 in 10 Minutes, Windows Server 2008 R2 Unleashed, Exchange Server 2010 Unleashed, ISA Server 2006 Unleashed, and many other titles . Partner at Convergent Computing (www.cco.com / +1(510)444-5700) San Francisco, U.S.A. based Infrastructure/Security specialists for SharePoint, AD, Exchange, SecuritySharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 3. SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 4. Architecting the Farm Three Layers of SharePoint Infrastructure Web Service Apps Data SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 5. Architecting the Farm Small Farm Models All-in-One (Avoid) DB and SP Roles Separate SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 6. Architecting the Farm Smallest Highly Available Farm 2 SharePoint Servers running Web and Service Apps 2 Database Servers (AlwaysOn FCI or AlwaysOn Availability Groups) 1 or 2 Index Partitions with equivalent query components Smallest farm size that is fully highly available SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 7. Architecting the Farm Best Practice Six Server Farm 2 Dedicated Web Servers (NLB) 2 Service Application Servers 2 Database Servers (Clustered or Mirrored) 1 or 2 Index Partitions with equivalent query components SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 8. Architecting the Farm Ideal Separate Service App Farm + Content Farm(s) Separate farm for Service Applications One or more farms dedicated to content Service Apps are consumed cross- farm Isolates cranky service apps like User Profile Sync and allows for patching in isolation SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 9. Architecting the Farm Large SharePoint Farms Multiple Dedicated Web Servers Multiple Dedicated Service App Servers Multiple Dedicated Query Servers Multiple Dedicated Crawl Servers, with multiple Crawl DBs to increase parallelization of the crawl process Multiple distributed Index partitions (max of 10 million items per index partition) Two query components for each Index partition, spread among servers SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 10. SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 11. SP Server Virtualization Sample 1: Single Server Environment Allows organizations that wouldnt normally be able to have a test environment to run one Allows for separation of the database role onto a dedicated server Can be more easily scaled out in the future SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 12. SP Server Virtualization Sample 2: Two Server Highly Available Farm High- Availability across Hosts All components Virtualized Uses only two Windows Ent Edition Licenses SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 13. SP Server Virtualization Sample 3: Mix of Physical and Virtual Servers Highest transaction servers are physical Multiple farm support, wit h DBs for all farms on the SQL cluster SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 14. SP Server Virtualization Scaling to Large Virtual Environments SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 15. Virtualization of SharePoint Servers Virtualization Performance Monitoring Processor (Host Only) Network Bandwidth 65% = Trouble 50% and above = Good 10%-50% = OK Network Latency - Output 2 = Trouble 15ms-25ms = Caution >25ms = TroubleSharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 16. SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 17. Data Management Sample Distributed Content Database Design SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 18. Data Management Remote BLOB Storage (RBS) Can reduce dramatically the size of Content DBs, as upwards of 80%-90% of space in content DBs is composed of BLOBs Can move BLOB storage to more efficient/cheaper storage Improve performance and scalability of your SharePoint deployment But highly recommended to use third party SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 19. Data Management Shredded Storage in SharePoint 2013 SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 20. SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 21. SQL Server Optimization Multiple Files for SharePoint Databases Volume #1 Volume #2 Volume #3 Volume #4 DB-A DB-B DB-A DB-B DB-A DB-B DB-A DB-B File 1 File 1 File 2 File 2 File 3 File 3 File 4 File 4 Tempdb File 1 Tempdb File 2 Tempdb File 3 Tempdb File 4 SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 22. SQL Server Optimization Multiple Files for SharePoint Databases Break Content Databases and TempDB into multiple files (MDF, NDF), total should equal number of physical processors (not cores) on SQL server. Pre-size Content DBs and TempDB to avoid fragmentation Separate files onto different drive spindles for best IO perf. Example: 50GB total Content DB on Two-way SQL Server would have two database files distributed across two sets of drive spindles = 25GB pre-sized for each file. SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 23. SQL Database Optimization SQL Maintenance Plans Implement SQL Maintenance Plans! Include DBCC (Check Consistency) and either Reorganize Indexes or Rebuild Indexes, but not both! Add backups into the maintenance plan if they dont exist already Be sure to truncate transaction logs with a T- SQL Script (after full backups have run) SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 24. SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 25. High Availability and Disaster Recovery Comparing the Options High Availability and Disaster Potential Potential Automatic Readable Recovery Data Loss Recovery Failover Secondaries (RPO) Time (RTO) SQL Server SolutionAlwaysOn Availability Group - synchronous- Zero Seconds Yes 0-2commitAlwaysOn Availability Group - asynchronous- Seconds Minutes No 0-4commitAlwaysOn Failover Cluster Instance NA Seconds Yes NA -to-minutesDatabase Mirroring - High-safety (sync + witness) Zero Seconds Yes NADatabase Mirroring - High-performance (async) Seconds Minutes No NALog Shipping Minutes Minutes No Not during -to-hours a restoreBackup, Copy, Restore Hours Hours No Not during -to-days a restore SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 26. HA and DR AlwaysOn Availability Groups in SQL 2012 SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 27. HA and DR Network Load Balancing Hardware Based Load Balancing (F5, Cisco, Citrix NetScaler Best performance and scalability Software Windows Network Load Balancing fully supported by MS, but requires Layer 2 VLAN (all packets must reach all hosts.) Layer 3 Switches must be configured to allow Layer 2 to the specific VLAN. If using Unicast, use two NICs on the server, one for communications between nodes. If using Multicast, be sure to configure routers appropriately Set Affinity to Single (Sticky Sessions) If using VMware, note fix to NLB RARP issue (http://tinyurl.com/vmwarenlbfix) SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 28. HA and DR Network Load Balancing Best Practice Create Multiple Web Apps with Load-balanced VIPs (Sample below) Web Role Servers o sp1.companyabc.com (10.0.0.101) Web Role Server #1 o sp2.companyabc.com (10.0.0.102) Web Role Server #2 Clustered VIPs shared between SP1 and SP2 (Create A records in DNS) o spnlb.companyabc.com (10.0.0.103) - Cluster o spca.companyabc.com (10.0.0.104) SP Central Admin o spsmtp.companyabc.com (10.0.0.105) Inbound Email VIP o home.companyabc.com (10.0.0.106) Main SP Web App (can be multiple) o mysite.companyabc.com (10.0.0.107) Main MySites Web App SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 29. SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 30. Security Five Layers of SharePoint Security Infrastructure Security and Best practices Physical Security Best Practice Service Account Setup Kerberos Authentication Data Security Role Based Access Control (RBAC) Transparent Data Encryption (TDE) of SQL Databases Transport Security Secure Sockets Layer (SSL) from Server to Client IPSec from Server to Server Edge Security Inbound Internet Security (Forefront UAG/TMG) Rights Management SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 31. Document SharePoint SPDocKit Document all key settings in IIS, SharePoint, after installation Consider monitoring for changes after installation for Config Mgmt. Fantastic tool for this is the SPDocKit - can be found at http://tinyurl.com/spdockit SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 32. For More Information SharePoint 2013 Unleashed from SAMS Publishing (http://tinyurl.com/sp2013unleashed) Microsoft Virtualizing SharePoint Infrastructure Whitepaper (http://tinyurl.com/virtualsp) Microsoft SQL Mirroring Case Study (http://tinyurl.com/mirrorsp ) SharePoint Kerberos Guidance (http://tinyurl.com/kerbsp) SharePoint Installation Scripts (http://tinyurl.com/SPFarm-Config) SharePoint Documentation Toolkit (http://tinyurl.com/SPDocKit) Contact us at CCO.com SharePoint dnevi 2012 Kranjska gora, 26. in 27. november
  • 33. Michael Noel Twitter: @MichaelTNoel www.cco.comSlides: slideshare.net/michaeltnoel Pre-order SP2013 Unleashed(http://tinyurl.com/sp2013unleashed) SharePoint dnevi 2012 Kranjska gora, 26. in 27. november