Deployment of Microsoft Azure Cloud Solutions by Modi, Ritesh -- Read -- Imperial Library of Trantor

Index

Title Page Copyright

Deployment of Microsoft Azure Cloud Solutions

About Packt

Why Subscribe? Packt.com

Contributors

About the authors About the reviewers Packt is searching for authors like you

Preface

Who This Book Is For What This Book Covers To Get the Most out of This Book What You Need for This Book

Conventions

Get in Touch

Reviews

Getting Started with Azure Implementation

Service Models Deployment Models Cloud Characteristics Microsoft Azure

Azure Services Overview

Azure Basics

Azure Resource Manager Resources Azure Regions Azure Portal Azure Automation Azure Automation Tools REST APIs

Summary

Azure Resource Manager and Tools

Understanding the Azure Resource Manager Functionalities Provided by the Azure Resource Manager Working with the Azure Resource Manager Creating an Azure Resource Group Adding a Resource to an Azure Resource Group

First Approach: Adding a Storage Account to your Azure Resource Group Second Approach: Adding a Storage Account to your Azure Resource Group Third Approach: Adding a Storage Account to your Azure Resource Group

Tagging in the Azure Resource Manager Locking Azure resources

Azure Resource Locks

Working with ARM Templates

Exporting a Deployment as an ARM Template (for IT pros)

Example 1:  Exporting a Resource Group to an ARM Template Example 2:  Exporting a Resource (from the Deployment History) to an ARM Template Example 3:  Exporting a Resource (Classic) to an ARM Template

Modifying an ARM Template Authoring an ARM Template Creating your own ARM Template (for Developers)

Azure Resource Explorer Summary

Deploying and Synchronizing Azure Active Directory

Azure Active Directory

Azure Active Directory Options

Azure AD Free Azure AD Basic Azure AD Premium P1

Deploying a Custom Azure AD Adding Accounts and Groups to Azure AD

Installing Azure AD Connect: Prerequisites Installing Basic Azure AD Connect Environment Azure AD Connect High Available Infrastructure

Summary

Implementing Azure Networks

Azure Networking Limits Azure Networking Components

Azure Virtual Networks (VNet) VNet Peering Azure VPN Gateways Azure Local Gateway Azure ExpressRoute

Azure Global Points of Presence National Azure Points of Presence

Azure Connections Azure Routes Azure Third-Party Network Devices Azure Load Balancer

Hash-Based Distribution Port Forwarding Automatic Reconfiguration Service Monitoring

Azure Application Gateways Azure Traffic Manager Azure DNS

Setting up Azure Networks

Setting up Azure VNet Setting up Azure Virtual Network Site-to-Site VPN

Configuring Local Network Gateway Configuring Azure Virtual Network Gateway Configuring Connection Between Local and Virtual Network Gateways

Setting up Azure Virtual Network with MPLS and ExpressRoute

Configuring Azure Virtual Network Gateway Configuring Azure ExpressRoute Circuit Configuring Connection Between ExpressRoute Circuit and Azure Virtual Gateway

Setting up Azure VNet Peering

Preparing the Deployment Configuring VNet Peering

Configuring Custom Routes Configuring Third-Party Network Appliances

Common Azure Network Architectures Summary

Implementing and Securing Azure Storage Accounts

Storage Accounts

General Purpose Storage Account Blob Storage Account

Replication and Redundancy

Locally Redundant Storage Zone-Redundant Storage Geo-Redundant Storage Read-Access Geo-Redundant Storage

Azure Storage Services

Blob Storage Services Table Storage Services Queue Storage Services File Storage Services Access Keys Exploring Azure Storage with Azure Storage Explorer

Premium Storage Account

Premium Storage Requirements

Pricing Summary

Planning and Deploying Virtual Machines in Azure

Azure Virtual Machine Types

A-series Virtual Machines D-series and DS-series Virtual Machines F-series and FS-series Virtual Machines G-series and GS-series Virtual Machines H-series Virtual Machines NV-series and NC-series Virtual Machines

NV Virtual Machines NC Virtual Machines

Ls-series Virtual Machines

Virtual Machine Extensions Managed Disks Availability Sets Deploying a Virtual Machine in Azure Accessing a Virtual Machine in Azure Changing IP and DNS Settings Common Scenarios for Virtual Machines

Optimization of Azure Related Communication Traffic On-demand Usage for Calculations Disaster Recovery for On-Premises Servers

Summary

Implementing Azure Cloud Services

What is an Azure Cloud Service? Understanding the Cloud Service Architecture

Roles The Service Endpoint

Going Deeper into the Cloud Services

Service Definition File

LoadBalancerProbes WebRole WorkerRole NetworkTrafficRules

Service Configuration File

Role NetworkConfiguration

Azure Cloud Services versus other Azure PaaS Offerings, such as Azure App Services

Selection of a Guest OS and an Update Level Selection of an Azure Series

Series A Series D series F series G series N Series H In a nutshell

Creating your first Azure cloud service

Part 1 Part 2

Summary

Implementing Azure Container Service

What is an Azure Container Service?

Understanding Containers

Cluster Orchestrator

Mesosphere DC/OS Docker Swarm Kubernetes

Creating your First Azure Container Service How to Work with Your Azure Container Service Cluster Summary

Implementing Azure Security

Azure Identity Security

Azure Active Directory

Azure Active Directory Editions Privileged Identity Management Identity Protection Detection of Vulnerabilities and Potential Risky Accounts Investigation of Potential Suspicious Events Multi-factor Authentication Conditional Access

Resource Security

Role-Based Access Control Resource Tags and Policies

Azure Network Security

Network Security Groups

Priority Source Destination

Network Virtual Appliances

Azure Storage Security

Key Management Shared Access Signatures

Service-Level SAS Account-Level SAS

Storage Encryption

Storage Account Encryption Azure Disk Encryption

Logging and Monitoring

Azure Logs Azure Security Center

Summary

Azure Design Patterns

Azure Zones and Regions

Availability of Resources Data and Privacy Compliance Performance of Applications Cost of Running Applications

Virtual Network

Architectural Considerations for Virtual Networks Benefits of Virtual Networks Virtual Network Design

Connecting to Resources within the Same Region and Subscription Connecting to Resources within the Same Region in Another Subscription Connecting to Resources in Different Regions in Another Subscription Connecting to On-Premise Data Centers

Storage

Storage Categories Storage Types Storage Features Architectural Considerations for Storage Accounts

Design Patterns

Messaging Patterns

Competing Consumers Priority Queue Queue-Based Load Leveling Pattern

Performance and Scalability patterns The Command and Query Responsibility Segregation (CQRS) Pattern

Throttling Pattern

Other Patterns

Retry Pattern Circuit Breaker Pattern

Summary

Designing High Availability

High Availability

SLA Factors Affecting High Availability

Planned Maintenance Unplanned Maintenance Application Deployment Architecture

High Availability versus scalability High Availability versus Disaster Recovery

Azure High Availability

Concepts

Availability Sets Fault Domain Update Domain Availability Zones Load Balancing Virtual Machine High Availability Computing High Availability Storage High Availability

PaaS High Availability Application High Availability

Load Balancing

Azure Load Balancers

Public Load Balancing Internal Load Balancing Port Forwarding

Azure Application Gateways

Azure Traffic Manager Architectural Considerations for High Availability

High Availability within Azure regions High Availability across Azure regions

Best Practices

Application High Availability Deployment Data Management Monitoring

Summary

Implementing Scalability

Scalability Scalability versus Performance Azure Scalability

Concepts

Scaling Scaling Up Scaling Down Scaling Out Scaling In Auto Scaling

PaaS Scalability

PaaS Scaling Up and Down PaaS Scaling Out and In

IaaS Scalability

Virtual Machine Scale Sets

VMSS Architecture VMSS Scaling

Horizontal versus Vertical Scaling Capacity

Auto Scaling Upgrades

Application Updates Guest Updates Image Updates

Scaling Best Practices

Prefer Scaling Out Bare Metal versus Dormant Instances Configuring Maximum and Minimum Number of Instances Appropriately Concurrency Stateless Caching and CDN N+1 Design

Summary

Designing IoT Solutions

IoT IoT Architecture

Connectivity Identity Capture Ingestion Storage Transform Analytics Presentation

Azure IoT

Identity Capture Ingestion Storage Transform and Analytics Presentation

IoT Hubs

Protocols Device Registration Message Management

Device to Cloud Messaging Cloud to Device Messaging

Security

Security in IoT

Scalability

Sku Edition Units

High Availability Summary

Designing and Implementing Data Solutions

Azure SQL

Azure SQL Availability Azure SQL Security Elastic Pools

Azure SQL Scaling Out Stream Analytics

Data Sources Data Integration Data Transformation Stream Analytics Engine Storage and Presentation Architecture

Azure Data Factory

Data Sources Data Transformation Publish and Presentation Using Data Factory

Azure Data Lake Azure Data Lake store

Data Lake Security Data Lake Performance

Azure Data Lake Analytics Azure SQL Data Warehouse Table Storage Summary

Designing and Implementing Serverless Solutions

A Short History of Serverless Serverless Principles of Serverless Technology

Lower Cost Event-Driven Single Responsibility Execute Quickly

Azure Functions or Functions-as-a-Service (FaaS)

Azure Functions Runtime, Bindings, and Triggers

Azure Function Runtime Azure Function Binding and Triggers

Azure Function Proxies Monitoring Authentication and Authorization Azure Function Configuration

Platform Configuration App Services Function Settings

Azure Function Cost Plans

Azure Functions Advantages Azure Functions Use Cases

Implementing Microservices Integration Between Multiple Endpoints Data Processing Integrating Legacy Applications Scheduled Jobs Communication Gateways

Types of Azure Functions Creating Your first Azure Function Creating an Event-Driven Function Creating a Connected Architecture with Functions Summary

Designing Policies, Locks, and Tags

Azure Tags

Tags with PowerShell Tags with the ARM Template Resource Groups versus Resources

Azure Policies

Built-in Policies Policy Language Allowed Fields

Azure Locks Azure RBAC

Custom Roles How is it Different from RBAC?

Examples of Implementing Azure Governance Features

Background Role-Based Access Control

Summary

DevOps on Azure

What is DevOps? DevOps Practices

Configuration Management

Desired State Configuration Chef, Puppet, and Ansible Azure Resource Manager Templates

Continuous Integration

Build Automation Test Automation Packaging

Continuous Deployment

Test Environment Deployment Test Automation Staging Environment Deployment Acceptance Tests Deployment to Production

Continuous Delivery Continuous Learning

Visual Studio Team Services

Team Foundation Version Control GIT

Preparing for DevOps

Provision VSTS Account Provision Azure Key Vault Provisioning a Configuration Management Server Provisioning Log Analytics Azure Storage Account Images Monitoring Tools Management tools

DevOps for PaaS Solutions

Azure App Services Deployment Slots Azure SQL Build and Release Pipeline

DevOps for Virtual Machine (IaaS) Based Solutions

Azure Virtual Machine Azure Public Load Balancer Build Pipeline Release Pipeline

DevOps for Container Based (IaaS) Solutions

Containers

Docker DockerFile

Build Pipeline Release Pipeline

Azure Automation

Provision Azure Automation Account Author DSC Configuration Importing DSC Configuration Compiling DSC Configuration Assigning Configuration to Nodes Browse the Server

Azure for DevOps Summary

Other Books You May Enjoy

Leave a Review - Let Other Readers Know What You Think

← Prev
Back
Next →

← Prev
Back
Next →