by Kristof Rennen, Mike Martin IaaS in the public cloud, the final frontier. These are the voyages of the Enterprise IT team, it's mission: to be scalable and agile as possible. To achieve their mission goal they can use the new features of Microsoft Azure: •Azure Files •Azure RemoteApp •the new VNET features and it's big brother ExpressRoute •and much much more don't forget: Azure goes to Infinity and … beyond!

1. IT Pros: Meet Azure... again!
Kristof Rennen
Mike Martin

3. Mike Martin
Who Am I
View more tips on my blog
http://techmike2kx.wordpress.com
Crosspoint Solutions
Where I Work
Architect, Windows Azure MVP,
MEET, Insider
What I Do
@Techmike2kx
Mike.Martin@csps.be
Where To Find Me

4. Who am I?
Kristof Rennen
Solution Architect Cloud & Mobile at Cronos
Microsoft Most Valuable Professional
Microsoft Extended Experts Team Member
Windows Azure vTSP & Insider / Mobile Services Advisor
Member of Azug, the Belgian Windows Azure User Group
@kristofrennen
contact@kristofrennen.be

5. The Azure platform
Microsoft Cloud infrastructure
Programming languages + tools
PowerShell, TFS + Git, Eclipse, .NET, Java, NodeJS, PHP, Python, Ruby

6. Hyper scale

7. 16 regions worldwide in 2014

13. Active Directory

17. MSDN Offer for Dev and Test
Windows
SQL Server and BizTalk
Special Images
BASIC VM Sizes for Dev, Test and Prod
Best value VMs
BYOLB and BYOAutoScale
BASIC.A1 $152.92 / year (8x5 work) $91.52 / year (8x5 and MSDN)

18. 24
100

19. Agent

22. PowerShell Desired State Config
Use DSC to drive configuration
PowerShell OneGet
Finds and installs software packages
Chocolatey community repository

23. configuration Main
{
Import-DscResource -Module xWebAdministration
# Install the IIS role
WindowsFeature IIS
{
Ensure = "Present"
Name = "Web-Server"
}
# Install the ASP .NET 4.5 role
WindowsFeature AspNet45
{
Ensure = "Present"
Name = "Web-Asp-Net45"
}
. . . .
. . . .
# Create a new website
xWebsite BakeryWebSite
{
Ensure = "Present"
Name = "FourthCoffee"
State = "Started"
PhysicalPath = "C:inetpubFourthCoffee"
DependsOn = "[File]WebContent"
}
}
Configuration
BootStrapper
Azure Blob
CLIENT

24. Configuration
BootStrapper
Azure Blob
CLIENT
DSC
Resources
Resource
Gallery
BootStrapper
Configuration
AZUREVM

29. VM Image
Captures all disks attached
Best effort disk consistency
Re-deploy as a new VM
Sysprep and non-Sysprep
OS Images
(legacy)
Data Log

31. External
Load
Balancer
Customer Network
Customer on
premises
Back end
Front end
Internet
Microsoft Azure
Public VIP
Microsoft Virtual Machine Converter 2.0
Azure
Server VMDK
Server

32. Name Virtual cores RAM
A8 8 56 GB
A9 16 112 GB

33. Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Virtual Networking
Scale Unit
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Scale Unit Scale Unit
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Azure
Server
Virtual Networking

36. Access control
Bitlocker Encryption
SQL Data Encryption (TDE)
TrendMicro SecureCloud
Afore Solutions
Operation Audit

38. Transform the Datacenter
Orchestrated disaster recovery to a second site
Microsoft Azure
Hyper-V Recovery Manager
Communication Channel
Replication channel:
Hyper-V Replica
Primary
Site
Windows
Server
Recovery
Site
Windows
Server

39. Communication
and Replication
Microsoft Azure
Site Recovery
Transform the datacenter
Orchestrated disaster recovery to a second site or to Azure
Communication Channel
Replication channel:
Hyper-V Replica
Primary
Site
Windows
Server
Recovery
Site
Windows
Server
Microsoft Azure
Site Recovery
Primary
Site
Windows
Server
Key features include:
Automated VM protection and replication
Remote health monitoring
Customizable recovery plans
No-impact recovery plan testing
Orchestrated recovery when needed

40. Networking
• VNet-to-VNet Connectivity
• IP Reservation for VIPs
• Instance Level Public IP
• Internal Load-balancing

41. VNet-to-VNet Connectivity
Before
Connect through Crop
VNet1
West Europe
VNet2
North Europe
Contoso HQ
After
Direct VNet-to-VNet

42. IP Reservation for VIPs &
Instance Level Public IP
VM1 VM2
Cloud
Service - 1
VM3 VM4
Cloud
Service - 2
LB
IP: A.B.C.D
1
1
2
2

43. External
Load
Balancer
Customer NetworkInternal
Load
Balancer
Customer on
premises
Back end
Front end
Internet
Microsoft Azure
Internal VIPPublic VIP

46. Hybrid: Networking
• Express Route GA
• Multiple Site-to-Site VPN

47. Public
internet
Public
internet
Public
internet
Microsoft
Azure
Microsoft
Azure
Microsoft
Azure

48. Multiple Site-to-Site VPN
Hybrid: Networking
Contoso NorthAm HQ
(10.0.0.0/16)
Contoso East Asia
(10.3.0.0/16)
Connect to multiple
on-premises locations

49. Azure Files
Azure VM
SMB 2.1
The Azure Storage System (3 copies)
Shared Settings, Diagnostic Share
Lift and Shift Applications
Azure VM Azure VM
Azure
Files

52. RemoteApp Cloud Deployment
• Office 2013 ProPlus preinstalled
• Rapid provisioning: apps quickly available
• Automatic maintenance: OS and apps
always up-to-date, Microsoft anti-malware
• Users can logon with Microsoft Account
or with corporate credentials federated
with Azure AD
RemoteApp Hybrid Deployment
• Apps, OS and settings are fully
customizable
• IT can manage template images and
apply updates via Azure Portal
• Full access to on-premises network
• User logon with corporate credentials
federated with Azure AD
Server 2012 R2
Session
Virtualization
Dynamic
Scalability
Global
presence
High Fidelity
with RDP
Secure,
WAN-ready
connectivity
Clients for
Windows, Mac,
iOS, Android

53. 5
RemoteApp Service
Pre-built template image
Automatically maintained
Published Apps
Session
Host …
Session
Host
Session
Host
Elastic Runtime
Persistent user data
(50GB per user)
Microsoft
Account
Azure Active
Directory
On-premises Network
Windows Server
Active Directory
DirSync
(optional)
RDP
Identity
Options
Authentication

54. Hybrid Cloud Deployment
• Core technology:
Azure Virtual
Networking with
Site-to-Site VPN
• RemoteApp Virtual
Networks build on
Azure networking
to seamlessly
access on-premises
resources
• Core technology:
Azure Active
Directory with
DirSync
• RemoteApp
leverages Azure AD
to control user
access and enable
Single Sign-On
• Core technology:
Windows Server
Active Directory
on-premises
• RemoteApp hybrid
resources are
domain-joined and
conform to on-
premises policies

55. Cloud Deployment: Automatically maintained
Latest OS and application updates rolled out on an ongoing basis
Always the latest Microsoft Office 2013 ProPlus
Hybrid Deployment: Updates under IT Control
Ongoing updates: Running RDSH VMs can be updated with GP, WSUS, SC, and
other management tools from on-premises.
Image-based updates: You can upload a new template image and apply it to a
RemoteApp service instance. Update will be rolled out automatically.
Patching and Updates

56. Cloud Deployment: Automatically maintained
Latest OS and application updates rolled out on an ongoing basis
Always the latest Microsoft Office 2013 ProPlus
Hybrid Deployment: Updates under IT Control
Ongoing updates: Running RDSH VMs can be updated with GP, WSUS, SC, and
other management tools from on-premises.
Image-based updates: You can upload a new template image and apply it to a
RemoteApp service instance. Update will be rolled out automatically.
Patching and Updates

57. 6
2
RemoteApp Service
Session
Host …
Session
Host
Session
Host
Elastic Runtime
Persistent user data
(50GB per user)
Azure Active
Directory
RDP
Authentication
Custom template image
Maintained via Azure Portal
Corporate Apps
Published Apps
On-premises Network
Windows Server
Active Directory
Azure VPN
Domain
Joined
Subject to IT policy via
GP, System Center, or
other enterprise
management tools
DirSync

58. RemoteApp Cloud Deployment
• Windows apps from Microsoft
as a turn-key, scalable,
globally available service
RemoteApp Hybrid Deployment
• Your corporate apps as a
service that can be access
from anywhere
Server 2012 R2
Session
Virtualization
Dynamic
Scalability
Global
presence
High Fidelity
with RDP
Secure,
WAN-ready
connectivity
Clients for
Windows, Mac,
iOS, Android

59. FeaturesPrice (per user) Free during preview
Window Server version Windows Server 2012 R2
Remoting Protocol RDP 8.1
Microsoft Office Professional Plus 2013 
Bring your own applications 
Device platforms Windows 7/8.x, iOS, Android
Coming soon: Windows Phone, Windows RT, Mac OS X
Microsoft Account support 
Federated Identity with Active Directory 
Integration with On-Premises IT Infrastructure 
Storage (per user) 50 GB
Initial capacity at preview 20 users per Azure account.
Customers can request additional capacity during the preview.
Regions US East, US West, Europe North, Europe West, Asia Pacific East, Asia
Pacific Southeast

60. All the latest announcementsGenerally Available
• ExpressRoute
• Multiple Site-to-Site
• In-Region and Cross-Region VNET
• Compute-intensive A8 & A9
• IP Reservation for VIPs
• Microsoft Azure Import/Export
• Azure Managed Cache Service
• Traffic Manager External End Points
• Azure Store (EA only)
• BizTalk Server 2013 R2 launch
• Linux distributions phone support
• PowerShell Script Deployment
• Ecosystem Security
• Windows Client in MSDN
Preview
• Instance level Public IPs
• Azure Redis Cache Service
• RemoteApp
• Internal Loadbalancing
• Azure File
• Azure API Management
• BizTalk Hybrid Connections
Coming Soon
• Site Recovery

61. And take home the
Lumia 1320
Present your feedback form when you exit
the last session & go for the drink
Give Me Feedback

62. Follow Technet Belgium
@technetbelux
Subscribe to the TechNet newsletter
aka.ms/benews
Be the first to know

63. Belgiums’ biggest IT PRO Conference