#comdaybe

How to bring Windows Azure Portal to your datacenter

Infront Consulting GroupSenior Technical Engineer, MVP SCCDM

Christopher Keyaert

Windows Server 2012

2

Designed for hosting service providers to drive lower infrastructure TCO and deliver new business opportunities.

More Customers

Network Virtualization

1

Disaster recovery with Hyper-V Replica

2

VM scalability & performance

3 4

Web-Farm Scalability with IIS8

5

Storage Spaces

Live Storage Migration & Shared Nothing Live Migration

6

Granular Resource Metering

7

Hyper-V Extensible Switch

8

Data De-Duplication

9

RDS Improvements for Desktop Hosting

10

More Efficiencies

More Services

Top features for service providers

8

Top features for service providers

System Center 2012

3

Best-in-class management for hosting service provider clouds

Physical, virtual, and cloud management

1 2 3 4

Operations automation

Multi-hypervisor support

5

Monitoring console and customizable dashboards

6

Provisioning with Service Templates

7

Flexible delegation with control

Application and OS management Multi-tenancy

More Customers

More Efficiencies

More Services

How Microsoft defines cloud

PublicPrivateMicrosoft

Service provider

Enterprise

Oneconsistentexperience

Enabling the Cloud OS Today

New high-density Web Sites with elastic cloud scaling and complete dev-ops experiences

New rich IaaS experience for self-service provisioning of Virtual Machines hosted on Windows Server and System Center 2012

New Self-Service Management Portal and REST APIs for managing new class of cloud based services

GA release available now for immediate download:http://www.microsoft.com/hosting/en/us/services.aspx

Consistent Dev-Ops Experiences

Consistent experiences across the Cloud OS

Web Sites

High density and scalable

Easy deployment and administration

Fully self-service

Third Party Services

Go Daddy

Zuora

Parallels

Apprenda

and more

Virtual Machines

Offer preconfigured workloads

Windows and Linux

Fully self-service

Service Mgmt Portal & API

High density and scalable

Easy deployment and administration

Fully self-service

Finished services

7

Web Sites

High density and scalable

Easy deployment and administration

Fully self-service

Service Management API

Service Management Portal

Virtual Machines

Offer preconfigured workloads

Windows and Linux

Fully self-service

Third Party

Zuora

Parallels

Apprenda

and more

Web Sites Virtual Machines Third Party

Service Provider Foundation API

System Center(Virtual Machine Manager Component)

Windows Server

Third Party Modules

Controller(Web farm framework)

Web FarmFront-end/Workers(Application Request Routing/Dynamic Windows Process Activation Service )

Windows Server Windows Server

Under the Hood

WorkerRole

WebSites

VMRole

SQLService

BusCachin

g

Other Service

sCDN.

Media,, etc.

Service Management API

WebSites

VMs

Private Service Provider

Bringing Windows Azure Services to Windows Server

SQL

Shared Cloud ServicesService Bus,

etc.

Service Management API

Web SitesAppsVMs

Self-ServicePortal

ServicePlansUsers

ServiceAdmin

AppsVMs

Self-ServicePortal

Subscriber Self-ServicePortal

Web Sites

DatabaseVMs

Apps

SP1 w/ Service Provider Foundation

Web SitesDatabasesVMs Subscriber Self-Service

Portal

Windows Azure

Self Service Portal Moves On-Premises

Common Mgt. Experience

Cloud-Enabled Services Move On-

Premises

Workload Portability

Consistent Dev.

Experience

DEMO – Tour of Service Management Portal

Infrastructure as a ServiceWeb Sites

Web SitesIt’s easy to deploy and administer high-density scalable website hosting services

Scalable Automated Flexible

High-density and secure web hosting

Support for Web Deploy (in WebMatrix and Visual Studio)

Support for Git, FTP and FTPS

Web Sites empower customers to easily scale their number of instances as well as moving from shared to reserved infrastructure with a single mouse click.

Support for PHP, Node.js, and ASP.NET

Metering and throttling of resources

Fully integrated into Web App Gallery

Popular open source software apps

Shared and Reserved Instances

1shared

Deploy Web Sites into a free, shared/multitenant hosting environment running on a shared set of server resources When a website is first created

it runs in Shared mode. It shares available compute

resources with other subscribers that are also running websites in Shared mode.

shared

reserved

SHARED INSTANCES

:-)

1reserved

Websites can be upgraded optionally to run in Reserved mode. This isolates them to run within a dedicated virtual machine.

When you change the mode from Shared to Reserved, the website is scaled up.

SHARED INSTANCES

:-)

RESERVED INSTANCE

:-)

Shared and Reserved Instancesshared

reserved

Elastically scale the resources sites use to increase reserved instance capacity as traffic increases.

Increasing the value for Reserved Instance Count will provide fault tolerance and improved performance through scale out.

A website in Reserved mode will provide more consistent performance than a website in Shared mode because it is not sharing resources with other tenants.

If Reserved Instance Size is changed from Small to Medium or Large, the website will run in a compute instance of corresponding size with access to associated resources for each size.

RESERVED INSTANCE

:-)

RESERVED INSTANCE

:-):-)

:-) :-)

:-)

:-) :-)

Shared and Reserved Instances

2reserved

sharedreserved

FlexibleSupport for PHP, Node.js, and ASP.NET

Best platformfor .NET

“Just works” with PHP (and Node.js)

Embraces web standards

Innovations with “Dev11” and ASP.NET MVC 4

ASP.NET “webpages” and Razor syntax

WebMatrix provides simple on-ramp and integrates deeply with open source.

First-class support for FastCGI/PHP

Popular open source software apps–WordPress, Joomla!, Drupal, Umbraco and DotNetNuke

Node.js pre-configured

Standards-based support

Great for asynchronous operations and client-driven web apps.

Excellent choice for rich HTML5 applications.

Infrastructure as a ServiceVirtual Machines

Deploying VMs in a Service Provider Cloud

Combine hosts and networks, storage, and library resources together to create a service provider cloud.

Delegate access to self-service users and let them manage cloud resources and create services

Deploy VMs to private clouds or hosts by using VM templates

Create a cloud by moving the underlying resources of network, storage, & compute into the cloud.

Configure the fabric

Create a cloud from the fabric

Delegate the cloud to a

self-service user

Deploy VMs

Service Provider Foundation (SPF)REST

OData APIAggregation Automation

Deploy Infrastructure as a Service (IaaS)

Fabric stamps (VMM)

Tenant 1

Self-service users

Tenant admins

Tenant’s apps, scripts,

and tools

Service Management Portal

Tenant 2

Self-service users

Tenant admins

Tenant’s apps, scripts,

and tools

Certificate

Browser

Service Management API

Service Provider Foundation (SPF)

Virtual Machines

Virtual MachineManager

VM networksVirtual Machine

Manager

Service Templates

Virtual MachineManager

AutomationOrchestrator

Enables Hosted IaaSFeatures

• VM management

• Service management

• Self-service VM networks

• Multi-tenancy / Multi-stamp

• Self-service tenant administration

• Enterprise identity for SPF

• Extensibility for hosted cloud API

• Usage Metering via SCOM

REST-based Odata API

2012

Admin

Key Service Administration Concepts

• Resource Provider o REST API-driven service that creates and manages resource types (VMs, websites,

databases)

• Planso Collections of services from resource providers that are offered to tenants

• Userso Users are managed via ASP.NET membership (AD integration in future release)

• Subscriptionso Users sign up for a subscription to a plan - each subscription has a unique IDo Resource providers deliver services via subscription, governed by Resource Provider-

specfic access controls and quota limits

1. SPF and VMM are installed/configured

2. Admin adds SPF endpoint to Service Mgmt API

3. Admin registers VMM server

6. Tenant creates and operates VMs

4. Admin creates plan with VM cloud offer5. Tenant subscribes to plan

Virtual Machines with System Center

SPF

VMM

AdminTenant

VMMVMM

Service Mgmt API

Admin UX

Tenant UX

PlansSubscriptions

Accounts

OffersStamps

User Roles

Plan

Offer

Subscription

1

2

3

4

5

6

DEMO - Admin IaaS User Experience

• Continuous metering of IaaS usage (CPU, Memory, Storage, Network)

• Supports per-subscription billing by an external system by exposing Billing APIs

• Data gathered into a Usage DB through the Service Management API

• IaaS data comes from the System Center Operations Manager data warehouse• Utilizes data coming from the VMM-OM integration through the VMM

Management Pack

• Usage metering endpoint added to SPF• Requires Update Rollup 1

IaaS Usage Metering

Service Management API

Service Provider Foundation

Virtual Machine Manager

Operations Manager

IaaSWebSitesSQL

UsageData

Usage Data Collector

CustomerBilling

System

SPF Usage REST Endpoint

Continuously gather usage metrics from

every provider

IaaS Metrics – Per Hour GranularityMetric Aggregation Description

MemoryAllocatedMin Lowest allocated memory size for a VM within an hour timespan

Max Highest allocated memory size for a VM within an hour timespan

MemoryConsumed

Min Lowest consumed memory size for a VM within an hour timespan

Max Highest consumed memory size for a VM within an hour timespan

Median Median average consumed memory size for a VM within an hour timespan

CPUAllocationCountMin Lowest number of CPU core allocated for a VM within an hour timespan

Max Highest number of CPU core allocated for a VM within an hour timespan

CPUPercentUtilization Median Median average in percentage of CPU consumption for a VM within an hour timespan

CrossDiskIOPerSecond

Min Lowest input/output per second (IOPS) across all attached disk for a VM within an hour timespan

Max Highest input/output per second (IOPS) across all attached disk for a VM within an hour timespan

Median Median average input/output per second (IOPS) across all attached disk for a VM within an hour timespan

CrossDiskSizeAllocatedMin Lowest allocated disk size across all attached disk for a VM within an hour timespan

Max Highest allocated disk size across all attached disk for a VM within an hour timespan

PerNICKBSentPerSecond

Min Lowest bytes sent per second on a network adapter attached to a VM within an hour timespan

Max Highest bytes sent per second on a network adapter attached to a VM within an hour timespan

Median Median average bytes sent per second on a network adapter attached to a VM within an hour timespan

Average Straight average bytes sent per second on a network adapter attached to a VM within an hour timespan

PerNICKBReceivedPerSecond

Min Lowest bytes received per second on a network adapter attached to a VM within an hour timespan

Max Highest bytes received per second on a network adapter attached to a VM within an hour timespan

Median Median average bytes received per second on a network adapter attached to a VM within an hour timespan

Average Straight average bytes received per second on a network adapter attached to a VM within an hour timespan

Tenant

• User experience consistent with Azure IaaS• Tenants access portal using hoster account

• AD authentication for tenants not supported (yet)

• Multiple subscriptions combined into same UI• Tenants see all of their VMs across subscriptions

• Virtual Machines – Deploy and manage virtual machines

• Virtual Networks – Create and manage virtual networks

Tenant Approach and User Experience

DEMO - Tenant IaaS User Experience

Deploying the Service Management Portal and API

Topology and TipsInstall guide - http://msdn.microsoft.com/library/jj838658.aspx

1. For lab, use Express Install on a single server2. For production, use Distributed Install

a. Tenant Portal and Tenant Public API – internet accessb. Tenant API, Admin Portal, Admin API – behind firewall

3. Tenant Portal is typically the bottleneckc. Scale for better performance

4. For high availabilityd. Hardware load balancer recommended for public tier

(Tenant Portal and Tenant API)e. Failover cluster instance, Always On Availability group

and a combination of the two are supported for SQL

5. SQL instance (for configuration data) f. Recommend a separate instance

6. During install process, take snapshots!a. Pre installation, Post installation, Post configuration

Tenant Portal Tenant Public API

Tenant API Admin API Admin Portal

SQL

(for config data)

Firewall

Internet

Capacity PlanningCapacity planning guide - http://msdn.microsoft.com/en-us/library/jj953500.aspx

Tenant Portal Performance Tests

Tenant Portal

Tenant API

SQL

(for ASfWS db’s)

Admin API, SQL RP, MySQL RP, Usage

Admin Portal

SQL MySQL

7 VMs – 2 core, 4GB

Workload Scenario Mix:• Dashboard Load (Reads) – 75%• Create Web site – 5%• Delete Website – 3%• Update website configuration – 3%• Create SQL database – 5%• Create MySQL database – 5%• Delete SQL database – 2%• Delete MySQL Database – 2%

Other Load Parameters:• Test Duration – 3 hours• # of subscriptions at the beginning – 8000• # of websites – 5000• # of SQL and MySQL databases – 6500 each• # of subscriptions at the beginning – 10000

Results:

# of Tenant Portal instances

Max Concurrent Users

Requests per second

1 3000 97

2 5000 165

4 7500 214

6 10000 258(very high load)

Customizing and Extending the Service Management Portal and API

Built to Differentiate

WebSites

VMs

Private Service Provider

SQL

Service Management API

Web SitesAppsVMs

Self-ServicePortal

ServicePlansUsers

Admin Web SitesDatabasesVMs

Subscriber Self-ServiceWeb SitesDatabases

Contoso Hosting

VMs Custom login, logos, banner, colors, extensions, etc…

Apprenda

a a pprenda

Add on Services

Custom Portals

SP1 w/ Service Provider Foundation

Usage

Integrate with Billing and

Chargeback Solutions

Samples and Documentation Available

Custom Theming Management APIs for Custom

Portals Custom Resource Providers Usage Adaptor for Billing Systems

Now available for immediate downloadhttp://bit.ly/ASWS-Samples

A sample kit contains images and styles (css files)

Step 1 - Override default images consistent with your UXExamples- Company Name Image - Banner image that shows up on login page

Step 2 - Override styles to update colors of textExamples- Intro text on login is black

.kt-main-content-area .kt-introduction {color: #000;

}

- Wizard colors are shades of green.wizard .wizard-bladescolor {

color: rgb(127, 177, 51); /* Beginning color for blades - must be rgb() */

background-color: rgb(100, 133, 20); /* End color for blades - must be rgb() */

}

Step 3 – Copy content folder on to the tenant portal machine - (C:\inetpub\MgmtSvc-TenantSite) merging folders and overwriting all files

Custom Themes

Step 2 – Create a blank web siteHTTP POST HTTPS://<TENANTSERVICEROOT>/{SUBSCRIPTIONID}/SERVICES/WEBSPACES/DEFAULTWEBSPACE/SITES HTTP/1.1Body of post contains site object

<Site xmlns="http://schemas.microsoft.com/windowsazure" xmlns:i="http://www.w3.org/2001/XMLSchema-instance"><AdminEnabled i:nil="true"/><AvailabilityState>Normal</AvailabilityState><EnabledHostNames i:nil="true" xmlns:a="http://schemas.microsoft.com/2003/10/Serialization/Arrays"/><HostNames xmlns:a="http://schemas.microsoft.com/2003/10/Serialization/Arrays"><a:string>mysite111.katal.dev2</a:string></HostNames><Name>mysite111</Name><Owner i:nil="true"/><RepositorySiteName i:nil="true"/><SelfLink i:nil="true"/><SiteProperties i:nil="true"/>….

A comprehensive API doc with all admin and tenant APIs is available to customers ; APIs may be called from custom portals to simulate behavior from in-box tenant portal

Example – Create a blank web site using Quick Create

Custom Portals

Step 1 – Create user subscriptionHTTP POST HTTPS://<ADMINSERVICEROOT>/SUBSCRIPTIONSBody of post contains subscription object

<AzureProvisioningInfo xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.microsoft.com/Azure/ProvisioningAgent/1.0"><AccountAdminLiveEmailId>johndoe@live.com</AccountAdminLiveEmailId><AccountAdminLivePuid>johndoe@live.com</AccountAdminLivePuid><FriendlyName>JohnDoe subscription</FriendlyName><OfferCategory>Gold</OfferCategory><ServiceAdminLiveEmailId>johndoe@live.com</ServiceAdminLiveEmailId><ServiceAdminLivePuid>johndoe@live.com</ServiceAdminLivePuid><SubscriptionId>d8198c18-a00a-442e-8f6d-435d77eae386</SubscriptionId></AzureProvisioningInfo>

Add on ServicesDomain Registration w/ GoDaddyA comprehensive sample is available for download. Customers may use the sample to create custom resource providers.

Step 1 – Build UI extension on the Client Side- Admin UI Extension- Plan UI Extension- Tenant UI Extension

Step 2 – Build controllers on the Server Side- Reseller Admin Controller- Reseller Tenant Controller

Step 3 – Build a REST API wrapper over service- Reseller Admin API- Reseller Tenant API- Reseller Notification API

Step 4 – Register service with Service Management API

A sample usage adapter is available to consume tenant usage data and connect to billing provider of choice.

Usage Adapter for Billing Systems

Blue Wave - Azure Pack for Windows Server

Azure Pack for Windows Server• Part of the Blue Wave• New functionalities

• Azure Service Bus• Service Management Automation ( + PowerShell Workflows)• Active Directory Integration• Subscription Co-Administrator• …

• Free• White paper available : http://

www.microsoft.com/en-us/server-cloud/windows-azure-pack.aspx

• Available in Public Beta by the end of June

QuestionsChristopher KeyaertMVP System Center Cloud and Datacenter ManagementChristopher.keyaert@infrontconsulting.com@keyaertchttp://scug.be/christopher

• Enable SPF VMM IIS Application Pool identity running as domain user (not network service account)

• SPF Application Pool identity needs admin access to VMM and “sa” access on the SPF SQL DB

• Configure SPF with Basic Authentication• Create Local User on SPF Server, add to SPF Local Groups (VMM,

Admin, Provider)• Use the Local User to register with the Service Management

Portal and API (not a domain user)• No need to create any tenants from the SPF PowerShell cmdlets,

this is handled automatically when users sign up for a subscription

• AD Users in the same domain as the VMM server are not supported

Useful Tips on Setting Things Up