Microsoft Networking Academy

Transcription

1 Microsoft Networking Academy with the C+E Global Black Belts Olivier Martin Networking TSP GBB Jaime Schmidtke ExpressRoute Partners GBB Bryan Woodworth Networking TSP GBB

2 Before we get started Welcome customers and partners!!! Material is public information No NDA info here. Use the IM window for questions. Agenda is posted at (and ed to interested parties!) Sessions are recorded and posted here :

3 Microsoft Networking Academy Runs every 4 week with typical agenda : Partner-Focused Sessions Azure Networking and Security Updates (10 minutes) Partner Spotlight of the week (20-30 minutes) Q&A (10 minutes) Deep Dive Sessions Short introduction (5 minutes) Deeper dive topic of the week (35-45 minutes) Q&A (10 minutes) GBB-ANF@microsoft.com to receive detailed schedules for the upcoming sessions! Recordings available on Channel 9!

4 Agenda for October 20 th, 2017 Intro and announcement Great Content : Ignite 2017 review Operations Management Suite Network Performance Monitor (OMS NPM for short!) A10 presentation on vthunder (30 Gbps!) Open Q&A

5

6 Security Monitoring Connectivity Availability Performance

7 Regions that support Availability Zones East US 2 West Europe

8 Internet / /24 VNET1:BESub On-Prem NATIP This feature is available in preview for the following Azure services and regions: Azure Storage: WestCentralUS, WestUS2, EastUS, WestUS, AustraliaEast, and AustraliaSouthEast Azure SQL Database: WestCentralUS, WestUS2, and EastUS. FrontEnd Subnet VNet1: /16 Microsoft Azure BackEnd Subnet On-Prem VNet Service Endpoint Access over NAT IPs AccountA /SQL Server) Azure Storage/ SQL USWest

9

10 NVA High Availability with HA Ports Microsoft Azure <DMZ Subnet> <NVA Subnet> Simplified Complex Configuration Virtual Network <Backend Subnet> NVA Pool NVA Pool Azure ILB Zookeeper Cluster Ports { } Protocols {TCP + UDP} Destination NextHop NextHop Destination Destination NextHop Gateway Backend ILB Active VIP NVA IP Passive NVA DMZ DMZActive NVA ILB VIP Express Route Active NVA Enterprise Active / Passive Supports OnlyN-Active deployment Ingress Traffic Egress Traffic Health Probe Orchestration

11 Metric Load Balancer Basic Load Balancer Standard Scale Up to 100 Backend instances Up to 1000 backend instances LB Scope Non-zonal Frontend Ips Zonal redundant and Zonal Frontend Ips Fault Tolerence Works in a Availability set Works in Availability set and Availability zones Diagnostics Basic NAT and Probe health status Integrated Front end and Backend health metrics NVA - Supports HA Ports Cost Free Charged at GA

12 Network Security Group Subnet Action Name Source Destination Service Allow AllowInternetToWeb Internet /24 HTTP(TCP/80) Allow AllowWebToApp / /24 HTTPS(TCP/8443) Allow AllowVNet VirtualNetwork VirtualNetwork Any Deny DenyAllInBound Any Any Any Cloud Platform Virtual Network Secured

13 New Capabilities for NSG s Keeping your apps secure at scale Service Tags & Augmented Rules Public Preview Regions: USWestCentral, USEast, USWest, USWest2, AustraliaEast, AustraliaSouthEast, UKSouth Actio n Network Security Group NSG Name Source Destination Port Allow AllowStorage VirtualNetwork Storage Any Allow AllowAzureTM VirtualNetwork AzureTrafficManager Any Allow AllowSQL VirtualNetwork Sql.EastUS Any Allow AllowMyExtRange s /24, /25 Azure Virtual Network or Virtual Machine /28, /25, /28 80,8080, 443 Deny DenyAllOutBound Any Any Any

14 New Capabilities for NSG s Keeping your apps secure at scale Application Security Groups WebServers AppServers DatabaseServers Jumpboxes QuarantineVMs Virtual Network Network Security Group NSG Action Name Source Destination Port Deny BlockQuarantineVM s Any QuarantineVMs Any Allow AllowInternetToWeb Internet WebServers 80,8080 (HTTP) Allow AllowWebToApp WebServers AppServers 443 (HTTPS) Allow AllowAppToDb AppServers DatabaseServer s 3306 (MySQL) Allow AllowInternetToJBs Internet Jumpboxes 22 (SSH) Deny DenyAllOutBound Any Any Any The features are available only in the following region: West Central US.

15 Virtual Network Virtual Network Virtual Network Virtual Network Peer Peer US West Virtual Network US West Virtual Network Canada Central Large private networks in Azure through peered Vnets Enables hub and spoke architectures in Azure Global private networks in Azure through peered VNets Private: no internet, through Backbone High bandwidth cross-region connectivity Peering virtual networks in different regions is currently in preview in US West Central, Canada Central, and US West 2.

16 Free Preview will start in East US, West US, West Central US expand globally in next few months

17 IPv6 support Monitoring Preview Merging of Microsoft Peering and Azure Public Peering Preview Customer s network Partner Edge ExpressRoute Circuit Microsoft Edge

18

19 Load Balancer Application Gateway Traffic Manager

20

21 30 Gbps VM to VM bandwidth world s fastest Accelerated Networking for more VM SKUs DPDK partner enablement VPN gateway SKUs up to 6 X faster

22

23

24 High Performance Virtual Appliance (vthunder) in Azure Saurabh Sureka, Senior Product Manager, Cloud and Software Jeevan Sharma, Sr. Solutions Architect Leah McLean, Cloud and Software Manager Your Secure Application Services Company

25 D A T A C E N T E R / C L O U D U S E R S APPS A 1 0 5,000+ Customers in 72 Countries

26 Multiple Points of Presence Apps hosted in Azure Secure data in Private Data Centers Serve multitude of traffic types Virtual Appliance Requirements High bandwidth IPSec Connectivity Multi-protocol L4/L7 Application Load Balancing SSL termination, AAM, Certificate Management Consolidate functionality to high performance Azure servers Harmony Controller VISIBILITY & MANAGEMENT Secure IPSec Connectivity Video IoT SSL Public Data Center

27 Microsoft Azure Accelerated Networking (SRIOV) Data Plane Data Kit (DPDK) A10 Networks Application Delivery Secure Connectivity Management & Analytics Results 10X Performance improvement in packets per second (pps) Significantly reduced latency & jitter Public Harmony Controller Secure Connectivity Data Center

28 Demo Topology: vthunder in Azure Client VM vthunder VM (VIP: ) Server VM Hosted On Public IPs OS ubuntu1~ A10 ACOS 4.pvt ubuntu1~ Azure VM ubclient4 acos3riov ubserver4

29 30G Throughput A10 vthunder Appliance in Azure Accelerated Networking

30

31 IPSec Service Using A10 vthunder Appliance in Azure Accelerated Networking

32 Public IP: Public IP: Eth1: Secure Tunnel Eth2: Client VM Tunnel IP: Tunnel IP: Client VM A10 Work Station (Private Data Center) Azure (East US2) IPSec Gateways: Private Data Center vthunder (4G) --- Azure vthunder (25G) AES 256, SHA1 Single tunnel, 90 Connections, Measured 3.59G

33

34 Checkout Azure Marketplace to find A10 vthunder Appliances To learn more about the A10 and Microsoft initiative, read our blogs: and A10 Networks Partner Contacts: Gunter Reiss VP, Strategic Alliances Leah McLean Senior Manager, Strategic Alliances

35 THANK YOU

36 Security Monitoring Connectivity Availability Performance

37 Open Q&A

38 Thank you! Session recording will be posted shortly here