Azure. Rainer Stropek. Neues in der MS Cloud. Microsoft Entwickler-Update software architects gmbh. Web Mail Twitter

Größe: px

Ab Seite anzeigen:

Download "Azure. Rainer Stropek. Neues in der MS Cloud. Microsoft Entwickler-Update 2016. software architects gmbh. Web Mail Twitter"

Sarah Bachmeier
vor 8 Jahren
Abrufe

1 Microsoft Entwickler-Update 2016 Rainer Stropek software architects gmbh Azure Neues in der MS Cloud Web Mail Twitter

in der MS Cloud Web Mail Twitter http://www.

2 Agenda Azure State of the Union Azure Portal Azure Resource Manager DocumentDB Azure SQL Database News Azure App Services News

3 Azure 101

Hyper scale Infrastructure is the enabler 24 Regions Worldwide, 22 ONLINE huge capacity around the world growing every year West US California US Gov Iowa Central US Iowa South Central US Texas North

Pune China South * Shanghai India South Chennai China North * Beijing East Asia Hong Kong Japan East Saitama Japan West Osaka SE Asia Singapore Australia East New South Wales Brazil South Sao Paulo

4 Hyper scale Infrastructure is the enabler 24 Regions Worldwide, 22 ONLINE huge capacity around the world growing every year West US California US Gov Iowa Central US Iowa South Central US Texas North Central US Illinois Canada Central Toronto US Gov Virginia Canada East Quebec City East US Virginia East US 2 Virginia North Europe Ireland West Europe Netherlands India West Mumbai India Central Pune China South * Shanghai India South Chennai China North * Beijing East Asia Hong Kong Japan East Saitama Japan West Osaka SE Asia Singapore Australia East New South Wales Brazil South Sao Paulo 100+ datacenters Top 3 networks in the world 2x AWS, 6x Google DC Regions G Series Largest VM in World, 32 cores, 448GB Ram, SSD Operational Announced/Not Operational * Operated by 21Vianet Australia South East Victoria

5 Platform Services Security & Management Portal Cloud Services Service Fabric Web Apps API Apps SQL Database Data Warehouse DocumentDB Hybrid Operations Azure AD Health Monitoring Azure Active Directory Azure AD B2C Batch RemoteApp Mobile Apps Logic Apps Redis Cache Azure Search Storage Tables AD Privileged Identity Management Domain Services Multi-Factor Authentication Automation Storage Queues BizTalk Services API Management Notification Hubs Backup Scheduler Hybrid Connections Service Bus HDInsight Machine Learning Stream Analytics Data Lake Operational Analytics Key Vault Visual Studio Azure SDK Data Factory Event Hubs Data Catalog Import/Export Store/ Marketplace VM Image Gallery & VM Depot Media Services Content Delivery Network (CDN) VS Online App Insights Infrastructure Services IoT Hub Mobile Engagement Azure Site Recovery StorSimple

Queues BizTalk Services API Management Notification Hubs Backup Scheduler Hybrid Connections Service Bus HDInsight Machine Learning Stream Analytics Data Lake Operational Analytics Key Vault Visual

6 Azure momentum New Azure customer subscriptions/month SQL databases in Azure Storage objects in Azure Azure Active Directory Users Developers registered with Visual Studio Team Services Revenue from Start-ups and ISVs

Active Directory Users Developers registered with

7 Azure Portal Endlich RTM

8 Weitere Informationen: Neues Azure-Portal Zentraler Einstiegspunkt für Azure-Management Erweiterbar, skalierbar, konsistent Ressourcen erstellen, verändern und überwachen Marktplatz Hochgradig personalisierbar

9 Demo Azure Portal

10 Azure Resource Manager Why do we need ARM?

11 Azure Service Management Azure Service Management API is the version 1 that provided programmatic access for functionality in the Azure platform. Exposed as a REST API ASM was XML based and the scripts can be used via PowerShell, CLI ASM can be used to configure Cloud Services, Storage accounts, Virtual Networks. Security Certificates uploaded via Management portal and separated from the binary package required by the cloud app.

Exposed as a REST API ASM was XML based and the scripts can be used via PowerShell, CLI ASM can be used to

12 ASM: Challenges and Limitations There is no way to specify multi-region or multi-service in a single script. Different scripts were used for targeting various services and the execution was orchestrated by the tool Used Affinity Groups concept for close proximity hints No consistency in the API exposed by services XML, some used JSON

Different scripts were used for targeting various services and the execution was

13 ASM: Challenges and Limitations Organizing 1000s of resources across the organization was hard. Limited access control exposed in the model. Subscription co-administrator for providing user access Limited auditing available from the portal The List Subscription Operations operation returns a list of create, update, and delete operations that were performed on a subscription during the specified timeframe.

Subscription co-administrator for providing user access Limited auditing available from the portal

14 Consistent Management Layer AZURE RESOURCE MANAGER API

15 Areas of Focus

16 Deploying with ARM template-driven declarative idempotent multi-service multi-region extensible

17 ARM ARM Templates ee/master/armworkshop ARM in Visual Studio Demo

18 DocumentDB Dokumentenorientiertes NoSQL als PaaS Dienst

19 Weitere Informationen: DocumentDB Dokumentenorientierte NoSQL Datenbank JSON Besonderheiten Schema-free, fully indexed Ad hoc Abfragen mit SQL JavaScript in der DB PaaS, Skalierbarkeit SDKs.NET, Node.js, Java, JavaScript, Python

20 Weitere Informationen: DocumentDB Was ist neu? General Availability (April 2015) Neue Regionen, größere DBs, funktionale Erweiterungen Mehr dazu:

21 DocumentDB Azure Portal cloudportam.com Demo

22 Azure SQL Database Weitere Infos:

23 SQL Database (v12) General Availability Neuerungen Wesentlich höhere Kompatibilität mit on-premise SQL Server Bessere Performance (mehr DTUs ohne Preiserhöhung) Elastic Database Pools DTUs auf viele DBs verteilen, um Kosten zu sparen Elastic DB Jobs

24 Elastic Database Pools

25 Dynamic Data Masking, Quelle: Microsoft Security Dynamic Data Masking Sicherheitskritische Daten maskieren Keine Programmänderung notwendig Konfigurierbar über Policies im Azure-Portal Row-Level Security Sicherheit in Multi-Tenant Apps

26 Demo SQL Data Masking

27 Security Contained Database Users Kein Login in der master DB mehr Backup/Restore, Failovers etc. CREATE USER user WITH PASSWORD='password'; Azure Active Directory Authentication für SQL Databases Ähnlich Windows Authentication in SQL Server Benutzt Contained Database Users Transparent Data Encryption (Preview) Verschlüsselung aller gespeicherten Daten (DB, Log, Backup) zur Laufzeit Keine Programmänderungen notwendig

28 Security Always Encrypted Verschlüsselung der Daten auf Client-Seite

29 App Services

30 Azure App Services Web Apps + Mobile Services Keine Trennung mehr Neu: Logic und API Apps

31 Logic und API Apps Swagger API App Logic App Demo

32 App Services Unterstützung von ASP.NET 5 (aka ASP.NET Core 1.0) Slot Settings Settings, die beim Swap nicht übertragen warden Für z.b. Testdatenbanken

33 App Services Slot Settings Demo

34 Microsoft Entwickler-Update 2016 Rainer Stropek software architects gmbh Danke für die Aufmerksamkeit Web Mail Twitter

Ähnliche Dokumente

Microsoft Cloud Deutschland für Service Provider

Microsoft Cloud Deutschland für Service Provider Mathias Schmidt, Insight Solution Sales Specialist Jakob Beck, Executive Account Manager Hosting Guido Maslak, Hosting Manager Insight Presentation Insight