6. Azure Backup Generally Available
Azure API Management Premium simplifies high availability and
massive scale for APIs
ExpressRoute for Office 365
Azure Active Directory Dynamic Membership For Groups
Automatic Password Change for Social Media Shared Accounts
Compute-Intensive A10 and A11 Virtual Machine Instances
Remote Desktop app for Windows Phone support for Gateway
and Remote Resources
Informatica Cloud Agent availability in Linux and Windows Virtual
Machines
Azure DocumentDB Hadoop Connector
Azure HDInsight support for more VM sizes
Enterprise-Grade Array-Based Replication and Disaster Recovery
with ASR and System Center GA
20. API APPS
API のビルドと利用
WEB APPS
ビジネスをスケール
LOGIC APPS
SaaS 及び on-premises の
ビジネスプロセスを自動化
MOBILE APPS
全デバイス対応の
モバイルアプリ構築
Azure App Service
| | | |
21. WEB APPS
Web apps の機能
• .NET, Node.js, Java, PHP, and Python
• 長いタスクを実行する Webjobs
• Integrated VS publish, remote debug…
• CI with GitHub, BitBucket, VSO
• Auto-load balance, Autoscale, Geo DR
• Virtual networking and hybrid connections
• ステージング環境のための Site slots
変更なくそのまま
Web アプリが動く
29. Mobile apps 新しい機能
• 長いタスクを実行する Webjobs
• CI with GitHub, BitBucket, VSO
• Auto-load balance, Autoscale, Geo DR
• Virtual networking と hybrid connections
• ステージング環境のための Site slots
モバイルサービスに加えて
様々な機能を搭載
MOBILE APPS
30. 容易にクラウド、もしくはカスタム API を利用:
• 人気のある SaaS 用の built-in API
• 全てのニーズにこたえる API のエコシステム
• 再利用可能な API を作成、カスタム発行
• Visual Studio による one click 発行とリモートデ
バッグ
• 様々な言語のための自動的なクライアント SDK
の生成
API の作成、利用がより簡単に
API APPS
42. VMs and VM Scale Sets
Azure Public CloudAzure-Consistent Private Cloud
VM Extensions
SCALR, RightScale,
Mesos, Swarm
Service Fabric
(VMs and Containers)
BatchApp Service
Media
Web
Apps
Mobile
Apps
Apprenda, CloudFoundry
Jelastic, Marathon
Infrastructure
IaaS and
IaaS+
General
Compute
PaaS
Vertical
compute
PaaS
Cluster
Orchestration
44. Concept IaaS v1 IaaS v2
Cloud Services 必要 不要
Affinity Groups 概念あり 不要
Availability Sets 障害ドメイン 2分割 障害ドメイン 3分割
Load Balancing Cloud Service のロードバランサーを利用 新型 (Cloud Service 不要)
Virtual IP Address Cloud Service のロードバランサーに依存した VIP 新型 (NIC or 新型LBにアタッチ)
DNS Name
Cloud Service が必須な為、インターネット公開が不要な
システムでも明示的にユニークなDNS名を必要とする
オプショナルとなり、必要な場合に Public IP リソースのパラメー
タとして設定する
Endpoints
Input Endpoints configured to open up
connectivity for certain ports.
Inbound NAT ルールをロードバランサーに設定する事で、同
等の機能を提供可能
Network Interfaces VM の構成上として見えていた 新型 (VM から独立した NIC リソース)
AWS EC2 に機能面で似てきたような。
45. SQL Azure Web App
SQL CONFIG
DEPENDS ON SQL
RESOURCE GROUP
53. Microservices
Azure
Windows
Server
Linux
Hosted Clouds
Windows
Server
Linux
Service Fabric
Private Clouds
Windows
Server
Linux
High Availability
Hyper-Scale
Hybrid Operations
High Density Rolling Upgrades
Stateful services
Low Latency
Fast startup &
shutdown
Container Orchestration
& lifecycle management
Replication & Failover
Simple
programming
models
Load balancing
Self-healingData Partitioning
Automated Rollback
Health
Monitoring
Placement
Constraints
63. SQL Data Warehouse の特長
Independently adjust compute + storage
Grow/Shrink in seconds
Yes.
Yes. Azure and on-premises
True SQL support
Fixed compute/storage ratio
Hour to days to resize
No.
No. AWS only
No support for indexes, SQL UDFs,
stored procedures, constraints
68. Azure analytic services
Maximize the value of every byte of data
HDInsight
Event Hub + Stream Analytics
Data Factory
Machine Learning
Power BI
SQL Data Warehouse
Data Lake
Hadoop as a service
IoT + data streaming
Data movement and transformation
Predictive analytics
Data visualization + business intelligence
Petabyte scale data warehouse
Infinite analytics optimized store
The Front End servers handle the app connection load and Workers run the app code. The Front End servers are managed in a dedicated compute resource pool. The Workers in turn are managed in 3 separate compute resource pools named
http://azure.microsoft.com/ja-jp/documentation/articles/app-service-web-how-to-create-an-app-service-environment/
In CY15, Microsoft is introducing Azure SQL Data Warehouse, a fully managed data warehousing-as-a-service in the cloud solution that can scale from gigabytes to petabytes and that can query both relational and Hadoop. It is for organizations that want to do data warehousing and analytics but don’t want to deal with the complex setup of procuring and building state-of-the-art hardware servers that are optimally tuned, Microsoft Azure SQL Data Warehouse is a managed service that makes deploying scale out data warehouses simple.
Scale-out on relational or non-relational data
Leveraging the MPP technologies we have in APS/PDW and the Azure SQL DB database technologies in the cloud, Microsoft is bringing scale-out data warehouse technologies to Azure. Customers can scale out to petabytes of relational data and also federate queries to Hadoop using PolyBase.
Powered by the Cloud
With Azure SQL Data Warehouse, you can deploy a data warehouse without the complexities. There is no hardware to procure, maintain or tune. Instead, this is done for you and you have access to a pre-tuned warehouse that you can spin up or down on-demand
Market-leading Total Cost of Ownership
TCO is a function of acquisition and ongoing maintenance and costs. Azure SQL DW will have the lowest TCO because you can spin up or down at will and only incur costs when spun up. Unlike other cloud DW vendors who require you to have compute up 24x7, this gives you much higher flexibility and lower costs over time. Over time, Azure SQL DW will minimize costs of maintain the system with IT Ops and DBAs as well as the cost to move your current on-premises DW to the cloud because of a relatively high T-SQL compatibility.
So, what is Azure Search?
Azure Search is a fully-managed search solution that allows developers to enable search in web and mobile applications by embedding a sophisticated search experience into these applications without having to worry about the complexities of full-text search and without having to deploy, maintain or manage any infrastructure.
There are three main points to Azure Search.
First, Azure Search enables developers to Surface their application’s data – We provide all the features you would expect from sophisticated search solutions and provide reliable guaranteed performance on top of that. The tunable ranking models built into Search allow developers to tie search results to their business objectives by promoting results that they want to show up. For example, if you have an ecommerce site, you would want high margin items to come up higher in the search results than low margin items.
Second, Azure Search reduces complexity. It’s a fully managed service so we’re removing the need to worry about corrupt indexes, managing and upgrading hardware, and scaling out. You can easily scale out Azure Search to handle additional storage or throughput when that’s called for by business conditions such as during peak shopping season or if your app is featured in the news and traffic increases dramatically.
Third, Azure Search allows developers to move quickly with confidence. As the name implies, Azure Search runs on Azure. It’s available in the new Preview Portal which is all about being able to get up and running quickly and having lots of complementary services nearby. Also, you control Search using an API which makes it easy and familiar to manage.
These benefits all support the claim that Azure Search is perfect for enterprise cloud developers, cloud software vendors, and cloud architects who need a fully-managed search solution.
管理ユニット (Administrative unit) は、管理の委譲をおこなうもので、2 月に Preview が出ている。
例えば、部署ごとに管理を委譲するような使い方が可能。(PowerShell を使って設定する)
https://msdn.microsoft.com/en-us/library/azure/421056d5-0d4a-4278-9c8c-4c656b9de9e2#BKMK_adminunits
Business to Business は、組織どうしのフェデレーションではなく、コラボレーション (リレーション設定) ができるようにするもの。例えば、ある大きな企業と、取引先のパートナー企業との間でのアイデンティティ連携をセキュアに実現できる。
今後提供予定。(まだ、具体的な機能はわかっていない)
B2C は、現在 Business (または Academic) のみにフォーカスしている Azure AD の機能を、さらに Consumer エリアにも広げていくもの。
これについても今後提供予定なので、具体的な話については待っていてほしい。
Conditional Access は、MFA の要・不要、特定の IP Range からの許可など、Application ごとのルールを設定できるもの。
1 月に Preview が出ている。
現在、Azure Portal (かつて Preview Portal と呼んでいたもの) で、Azure AD をベースとした Role 設定が可能になっているが、Privileged Identity Management は、こうした特定ユーザーに対する admin 権限の付与をよりセキュアにおこなうために提供されているもの。柔軟な操作 (例えばテンポラリーの admin 設定) やモニタリングが可能。
Ignite のタイミングで Preview 提供開始
http://azure.microsoft.com/en-us/documentation/articles/active-directory-privileged-identity-management-configure/
Azure AD Join は、もっとも注目すべき機能。
現在、Windows Client で microsoft account (<- こちらは Consumer アカウント管理のための基盤) でのログインが可能だが、ついに Windows 10 で Azure AD を使ったログインが可能。企業ニーズに対応した細かな管理や、Office 365 との SSO など実現。
最近、Active Directory Team ブログに掲載され、いくつかの付加機能については Windows 10 の first release ではなく、fall での機能追加になると発表されている(下記)
http://blogs.technet.com/b/ad/archive/2015/05/13/azure-active-directory-and-windows-10-making-the-enterprise-cloud-a-reality.aspx
Azure Domain Name System (DNS) により、Azure アプリとともにドメインをホストできます。Azure でドメインをホストすることで、既存の Azure サブスクリプションを使用して DNS レコードを管理できます。Microsoft のネーム サーバーのグローバルなネットワークには、ドメインでの超高速 DNS 応答や超高可用性を保証するのに必要なリーチ、拡張性、および冗長性があります。※AWS の Route53 対抗となります。
Subject: [Networking]: ER & S2S co-exist; Multiple VIPs per Cloud Service are available
What it is about: New networking features are available :
ExpressRoute and Site-to-Site VPN can now be used simultaneously on the same VNET:
Enables setting up highly available cross-premises connections by using one as a failover for the other.
The High-performance VPN gateway or the new Standard VPN gateway are required to use this capability.
New ‘Standard’ VPN Gateway: allows you to connect a VNET via both ER and S2S VPN
Provides higher throughput for ExpressRoute than the current dynamic routing VPN gateway
Multiple Virtual IPs per Cloud Service:
More than one load-balanced public IP address (also called Virtual IP address) can be now assigned to a set of virtual machines (VMs), enabling high-availability and high-scale scenarios. Enables scenarios such as hosting of multiple secure websites in a cloud service or allow multiple SQL Server AlwaysOn Availability Group listeners access to the same set of VMs.
Why it is important: Major developments in Azure networking
Starting today, you can get more than one load-balanced public IP address (also called Virtual IP address) assigned to a set of virtual machines (VMs), enabling high-availability and high-scale scenarios. This enables scenarios such as hosting of multiple secure websites in a cloud service or allow multiple SQL Server AlwaysOn Availability Group listeners access to the same set of VMs.
Convert Existing Dynamic VIP to Reserved IP Addresses in Azure
What it is about: A blog post by our fellow community member CSA Carsten Lemm about converting dynamic to reserved IP addresses for Azure cloud services.
Why it is important: One of the great things that came with the plethora of new features and capabilities around Azure networking at Build 2015 and didn’t get a lot of attention is the fact that now you have much more flexibility in working with reserved IP addresses in your deployments. By default, VIP addresses of Azure cloud services are dynamic by nature, i.e. they may change when VMs get de-provisioned or the Azure fabric needs to move your VMs to another host, e.g. due to hardware failure.
What you can do now with the latest release of the Azure PowerShell Cmdlets is to convert existing dynamic VIP to reserved IP addresses. Doing so will take the current cloud service VIP from the data center’s general IP address pool and assign it specifically as a reserved IP to your Azure subscription. The IP will remain associated with the cloud service deployment, but can also be used for other deployments in your subscription, as we will see in this post.