Azure Arc - Managing Hybrid and Multi-Cloud Platforms

Azure Arc
Manage Hybrid and Multi-Cloud Platforms

Agenda
2
1 Challenges
3 Benefits of Azure Arc
4 How to use Azure Arc - Public
Preview
2 Azure Arc – Introduction & Features

IMAGES WITH TEXT
We’re living in a
Multi-Cloud World

Growing Applications
Databases
Virtual Machines
Serverless
Containers
Diverse infrastructure
Datacenters
OEM Hardware
Co-Lo Infrastructure
IoT Devices
Edge
IMAGES WITH TEXTCustomer environments are increasingly complex
Multi-Cloud
Environment
Microsoft Azure
AWS
Google Cloud

IMAGES WITH TEXTIntroducing Azure Arc
Unifying Orchestration &
Governance in Multi-cloud
Deployments
Enables deployment of Azure
services anywhere and extends
Azure management to any
infrastructure and cloud such as
Amazon, Google

What is Azure Arc?
Bring Azure services and management to any infrastructure
Azure Arc is a set of technologies that extends Azure management and enables Azure
services to run across on-premises, multi-cloud, and edge.
Run Azure
data
services
anywhere
Extend Azure
management
across your
environments
Implement
Azure
security
anywhere
Adopt cloud
practices on-
premises

Management
Experiences
Azure Portal
Azure CLI
Azure SDK
Azure
Azure Resource
Manager
Identity
RBAC
Policy
Index
Groups
Etc.
Customer Locations
Azure Data Services
Wave 1
• SQL
• PostgresSQL
Resource Specific
Tools
Kubernetes
Servers
Azure Arc Data Controller
Azure Arc
Data agent
Azure PaaS
Control
Azure Arc KBs
Agent
GitOps Manager
KBs Cluster
Linux
Azure Arc
Server agent
Windows Server
Azure Data Studio
KBs Native Tools
Cluster Provisioning
Cluster upgrade and patch
management
Cluster lifecycle management
Cluster monitoring
Server Admin Tools
Azure Arc
data RP
Container
registry
Azure Arc
KBs RP
Azure Arc
Server RP
Azure Arc
technologies
Azure Management
Single Control Pane for resources everywhere

IMAGES WITH TEXTFeatures of Azure Arc
Organize and govern
across environments
Manage Kubernetes
Apps at scale
Run data services
anywhere
Databases, Kubernetes clusters,
and servers sprawling across on-
premises, edge and multi-cloud
environments
Deploy and manage Kubernetes
applications across environments
using DevOps
Automated patching, upgrades,
security and scale on-demand

IMAGES WITH TEXTBenefits of Azure Arc
Unified approach to
managing environments
Azure Resource Manager,
Microsoft Azure Cloud
Shell, Azure portal, API,
and Microsoft Azure
Policy.
Build containerized
apps
Cloud
Security
Apps are deployed,
configured, and managed
uniformly using GitOps-
based configuration
management
Across environments with
centralized role-based
access control and
security policies.

IMAGES WITH TEXTBenefits of Azure Arc
Organize all your
servers
Govern all your servers
that sit on-premises, on
other clouds or at the
edge the same way that
you govern your Azure
servers
Expand Azure Stack
for any edge
Provide cloud capabilities in
the harshest environment
conditions supporting
scenarios such as tactical
edge, humanitarian and
emergency response efforts
Run Managed
Services
Arc can run managed
services successfully in a
hybrid and multi-cloud
environment

IMAGES WITH TEXTHow to use Azure Arc - Public Preview
Connect machines to
Azure using Azure Arc
for servers - Portal
Connect machines to
Azure using Azure Arc
for servers - PowerShell
Azure Connected
Machine Agent CLI
interface

IMAGES WITH TEXTAzure Arc for Servers
Allows you to manage machines
which are outside of Azure
Non-Azure machine when
connected to Azure, it becomes
a Connected Machine - A
resource in Azure
Connected
Machine has a Resource ID

Windows Server 2012 R2
and newer
Clients – Supported Operating Systems
Ubuntu 16.04 and
18.04
In Public Preview

Networking Configuration
Agent requires connectivity to Azure Arc
service endpoints
Make sure URLs are not blocked by
firewall
All connections are outbound from the
agent to Azure, and are secured with SSL
All traffic can be routed via an HTTPS
proxy

Networking Configuration - Installation Network Requirements
Download the Azure Connected Machine
Agent package
Below sites must be accessible from your
environment

Register the required Resource Providers
In order to use Azure Arc for Servers, you must register the required Resource Providers.
Microsoft.HybridCompute Microsoft.GuestConfiguration

Machine changes after installing the agent
If you have a change tracking solution deployed in your environment, you can use the list below to track, identify,
and allow the changes made by the Azure Connected Machine Agent (AzCMAgent) installation package
Windows
Registry keys for Azure Connected Machine Agent
Linux

Supported Scenarios
After you register a node you can start managing your nodes using other Azure services. Following scenarios are
supported for Connected Machines.
• Assign Azure policies to Connected Machines
using the same experience as policy assignment to
Azure virtual machines.
• The Guest Configuration Agent logs for a
Connected Machine are in the following locations
Guest Configuration
• Log data collected by the Microsoft Monitoring
Agent (MMA) and stored in Log Analytics
workspace will now contain properties specific to
the machine such as ResourceId
• Machines that already have the MMA agent
installed, will have Azure Arc functionality enabled
via updated Management Packs.
• MMA agent ver 10.20.18011 or above is required
• Hybrid ResourceId form
Log Analytics

Connect machines to Azure using Azure Arc for servers - Portal
Generate the agent install script using the Azure portal
1. Launch https://aka.ms/hybridmachineportal
2. Click on +Add
3. Follow the wizard to completion
4. The last page has a script generated which you can
copy (or download).
On the Non-Azure servers you want to manage:
1. Logon to the server (using SSH, RDP or PowerShell
Remoting)
2. Start a shell: bash on Linux, PowerShell as
Administrator on Windows
3. Paste in the script from the portal and execute it on
the server to be connected to Azure.
4. The default authentication for onboarding an
individual server is interactive using Azure 'device
login'. When you run the script, you will see a message
similar to:

Execute the script on target nodes
Log in to each Node and execute the script you generated from the portal. After the script completes
successfully, go to the Azure portal verify that the server has been successfully connected.

Clean up
1. Select the machine in Portal, click
the ellipsis and select Delete.
2. Uninstall the agent from the
machine.
On Windows, you can use the "Apps &
Features" control panel to uninstall the
agent.

Clean up
Script the uninstall, you can use the following example which retrieves the PackageId and uninstall agent using
On Linux, execute sudo apt purge hybridagent

Connect machines to Azure using Azure Arc for servers - PowerShell
Create a Service Principal for Onboarding At Scale
Limited management
identity that is granted
only the minimum
permission
necessary to connect
machines to Azure
Safer than using a more
powerful account like a
Tenant Administrator.
Used only during
onboarding
Safely delete the
Service Principal
after you connect your
desired servers

Steps to create the Service Principal
In this example, we will use Azure PowerShell to create a Service Principal Name (SPN).

Steps to create the Service Principal

Manually install the agent and connect to Azure
Linux
• For Linux servers, the agent is distributed via
Microsoft's package repository using the
preferred package format for the distribution
(.RPM or .DEB).
Note: During Public Preview, only one package has
been released, which is suitable for Ubuntu 16.04
or 18.04.
The simplest option is to register the package repository,
and then install the package using the distribution’s
package manager. The bash script located at
https://aka.ms/azcmagent performs
1. Configures the host machine to download from
packages.microsoft.com
2. Installs the Hybrid Resource Provider package
3. Optionally, configures the agent for proxy operation,
if you specify - -proxy

Parameters
tenant-id
subscription-id
resource-group
location
resource-name
The Tenant GUID. You can find it in Azure portal by selecting Azure Active
directory -> properties -> Directory ID.
The GUID of the subscription, in Azure, where you want to connect your machine.
The resource group where you want your machine connected
See Azure regions and locations. This location can be the same, or different, as
the resource group’s location. For public preview, the service is supported in
WestUS2 and West Europe.
(Optional) Used for the Azure resource representation of your on-premises
machine. If you do not specify this value, the machine hostname will be used.

Parameters
Upon successful completion, your machine is connected to Azure. You can view your machine in the Azure
portal by visiting https://aka.ms/hybridmachineportal.

Proxy server configuration
Linux
• Run the install_linux_hybrid_agent.sh script from the Install the Agent section above, with --proxy .
• If you have already installed the agent, execute the command
/opt/azcmagent/bin/hybridrp_proxy add http://{proxy-url}:{proxy-port} , which configures the proxy and restarts the agent.
Windows

Clean up
1. Select the machine in Portal, click
the ellipsis and select Delete.
2. Uninstall the agent from the
machine.
On Windows, you can use the "Apps &
Features" control panel to uninstall the
agent.

Clean up
Script the uninstall, you can use the following example which retrieves the PackageId and uninstall agent using
On Linux, execute sudo apt purge hybridagent

Azure Connected Machine Agent CLI interface
Azcmagent (Azure Connected
Machine Agent) tool is used to
configure and troubleshoot a
non-azure machines connection
to Azure.
The agent itself is a daemon
process called himdsd on Linux,
and a Windows Service called
himds on Windows.
azcmagent connect is used to
establish a connection between
this machine and Azure, and
azcmagent disconnect if you
decide you no longer want that
connection.
Options

azcmagent connect
Synopsis
• Uses the authentication options provided to create a resource in Azure Resource Manager
• Resource is in the subscription and resource group requested
• Data about the machine is stored in the Azure region specified by the location parameter
• Certificate corresponding to the System-Assigned Identity of this machine is then
downloaded and stored locally
• Azure Connected Machine Metadata Service and Guest Configuration Agent begin
synchronizing with Azure cloud

azcmagent connect
Syntax azcmagent connect [flags]
Options

azcmagent disconnect
Synopsis
• Uses the authentication options provided to create a resource in Azure Resource Manager
• Azure Connected Machine Metadata Service and Guest Configuration Agent will be
disconnected.
• This command does not stop or remove the services
• This command requires higher privileges than the "Azure Connected Machine
Onboarding" role.
• Once a machine is disconnected, use azcmagent connect , not azcmagent reconnect if
you want to create a new resource for it in Azure.

azcmagent disconnect
Syntax azcmagent disconnect [flags]
Options

azcmagent reconnect
Synopsis
• Reconnect machine with invalid credentials to Azure
• If a machine already has a resource in Azure but is not able to authenticate to it, it can be
reconnected
• If a machine was disconnected with azcmagent disconnect , use azcmagent connect
instead.
• Retrieve new credentials corresponding to the Azure Resource Manager resource
representing this machine.
• This command requires higher privileges than the Azure Connected Machine
Onboarding role.

azcmagent reconnect
Syntax azcmagent reconnect [flags]
Options

azcmagent show
Synopsis Gets machine metadata and Agent status. This is primarily useful for troubleshooting
Syntax azcmagent show [flags]
Options -h, --help help for show

azcmagent version
Synopsis Display the Hybrid Management Agent version
Syntax azcmagent version [flags]
Options -h, --help help for version

IMAGES WITH TEXTResources
1. Azure Arc: Enterprise Multi-Cloud Platform - https://www.winwire.com/azure-arc/
2. Introducing Azure Arc - https://azure.microsoft.com/en-us/services/azure-arc/
3. Azure services now run anywhere with new hybrid capabilities - https://azure.microsoft.com/en-us/blog/azure-
services-now-run-anywhere-with-new-hybrid-capabilities-announcing-azure-arc/
4. Organize all your servers outside of Azure with Azure Arc - https://azure.microsoft.com/en-
us/resources/videos/organize-govern-across-environments-with-azure-arc/
5. Azure Hybrid - https://azure.microsoft.com/mediahandler/files/resourcefiles/azure-arc-
infographic/Azure_Arc_Infographic.pdf

Contact Us
• Website: www.winwire.com
• Email: marketing@winwire.com
• Blog: http://www.winwire.com/blog/
• Twitter: @winwire

Azure Arc - Managing Hybrid and Multi-Cloud Platforms

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Ähnlich wie Azure Arc - Managing Hybrid and Multi-Cloud Platforms

Ähnlich wie Azure Arc - Managing Hybrid and Multi-Cloud Platforms (20)

Mehr von WinWire Technologies Inc

Mehr von WinWire Technologies Inc (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Azure Arc - Managing Hybrid and Multi-Cloud Platforms