Dell EMC Cloud for Microsoft Azure Stack

Dell EMC Cloud for Microsoft Azure Stack Karsten Bott Advisory Cloud Platform Specialist, Azure ( Stack ) @azurestack_guy

Jeffrey Snover Technical Fellow Microsoft Azure Stack Architect 3

4

First consistent Hybrid Cloud Platform Virtualization-replacement play Integrated system with IaaS & PaaS DIY infrastructure Regularly updated for Azure-consistency Static system you deploy & forget Truly open and flexible (just like Azure).NET/Windows only

Why hybrid cloud?

The new digital customer Rising and continuously changing expectations around experiences ANYWAY Always available ANYWHERE Real-time updates ANYTIME Intelligent interactions Intelligent applications are the new face of business 7 of 62 Dell - Internal Use - Confidential

The new digital customer Rising and continuously changing expectations around experiences Always available Real-time updates Intelligent interactions Intelligent applications are the new face of business 8 of 62 Dell - Internal Use - Confidential

Azure Services on premises with Azure Stack Azure IaaS on-premises Azure PaaS available on-premises Virtual Machines (VM) VM Scale Sets Containers with Docker Networking Storage Blob, Tables, Queues Above services will be available at GA Developers One Azure ecosystem Unified app development Azure services in your datacenter IT Azure App Service Azure Functions Azure Service Fabric Cloud Foundry Azure Service Fabric and Azure Container Service will be available post-ga We will deliver additional Azure services through frequent updates to Azure Stack for continuous innovation 9 of 62 Dell - Internal Use - Confidential

Solution Introduction

Azure services everywhere

Dell EMC Cloud for Microsoft Azure Stack Key design principles Software Support Hardware Services Integrated system Closed system Hyper-converged Architecture, hardware and topology Deployment, configuration, provisioning Validation Monitoring, diagnostics Scale out building blocks Security and privacy Business continuity Patching and updating Field replacement of parts Azure consistent management No System Center 12

Hybrid Design Patterns

Foundational Patterns Requirement Promise Requirement Promise I need connectivity between resources in my on-prem environment and public cloud Azure I can build hybrid applications that have components in both Azure and Azure Stack I want to consolidate my CI/CD pipelines across my on-prem environment and the public cloud Azure I can change my deployment location without changing my application Example - Site to Site VPN/Express Route Hybrid CI/CD Pipeline Azure Stack Azure Stack 14

Test/Dev Scenarios I conduct my dev/test efforts where it is most practical without having to retool for public cloud deployments. Hybrid CI/CD Pipeline Azure Azure QA PROD Software Code CHOICE! Repository Infrastructure Code QA PROD Azure Stack Azure Stack 15

Cloud Burst Scenarios I can take advantage of the elasticity of the public cloud when I need to. Azure Hybrid CI/CD Pipeline Azure Stack 16

Geo-Distributed Scenarios I can direct users to the most suitable cloud for their needs. Azure Traffic Manager Azure Stack 17

Disconnected Scenarios I can run completely disconnected from the internet where required. Azure Stack 18

Live Migration of Workloads? Azure Stack is NOT intended to address this scenario Azure Stack Azure 19

Compute, Storage, Networking Architecture

Azure Stack architecture summary Guest workload resources (IaaS + PaaS) End-user experiences Virtual machines (Linux or Windows) Storage blobs Virtual networks Websites (.NET, PHP, Python ) Service fabric clusters Unified app model Extensible service framework Cloud infrastructure Core services Subscriptions RBAC Gallery Metrics Usage Additional services Foundational services Compute Storage Networking Platform services Infrastructure management Compute Storage Networking Microsoft Azure Services Additional services Third-party services 21

42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 CISCO NEXUS 3172-10GE 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 CISCO NEXUS 3172-10GE FAIL OK N2200-PAC-400W N3K-C3048-FAN FAN STAT FAIL OK N2200-PAC-400W 50 50 51 52 51 52 53 54 53 54 MGMT 1 ID 0 CONSOLE STAT 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 CISCO NEXUS 3172-10GE 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 CISCO NEXUS 3172-10GE FAIL OK N2200-PAC-400W N3K-C3048-FAN FAN STAT FAIL OK N2200-PAC-400W 50 50 51 52 51 52 53 54 53 54 MGMT 1 ID 0 CONSOLE STAT 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 42 42 41 41 40 40 39 39 MGMT 1 FAIL FAIL CONSOLE 38 38 OK OK STAT 37 37 36 36 35 35 34 34 33 33 32 32 31 31 30 30 29 29 28 28 27 27 26 26 25 25 24 24 23 23 22 22 21 21 20 20 19 19 18 18 17 17 16 16 15 15 14 14 13 13 12 12 11 11 10 10 9 9 8 8 7 7 6 6 5 5 4 4 3 3 2 2 1 1 0 54 51 53 51 53 ID 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 49 25 50 52 54 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 49 25 50 52 N2200-PAC-400W N2200-PAC-400W STAT FAN CISCO NEXUS 3172-10GE CISCO NEXUS 3172-10GE N3K-C3048-FAN 14g Scale Units S\M\L Scale Units Small: ~475 VMs Medium: ~1100 VMs Large: ~1750 VMs Flexible (capacity and perf) options per scale unit HCI Node: Capacity configuration options Low: 12C/24T, 384G Mem, 5.7TB Cache, 40TB Data Mid: 16C/38T, 576G Mem, 11.5TB Cache, 80TB Data High: 24C/48T, 768G Mem, 11.5TB Cache, 100TB Data Available Professional Services Developer Edition Accelerator Services Workshops and Implementation 1xHCI node Cores: 20-24 Mem: 96-384GB Cache: 1440 GB Data: 6TB 3 Available Configs Starter Edition PaaS Edition Developer Edition 4xHCI nodes Cores: 96-192 Mem: 1.5TB 3TB Cache: 23 TB- 46TB Data: 160TB 400TB 2x10GbE TOR 1x 1GbE Mgmt 1x R640 Mgmt Node N+2 Redundancy 8xHCI nodes Cores: 192 384 Mem: 3TB 6TB Cache: 46 TB- 92TB Data: 320TB 800TB 2x10GbE TOR 1x 1GbE Mgmt 1x R640 Mgmt Node N+2 Redundancy 12xHCI nodes Cores: 288 576 Mem: 4.6TB 9.2TB Cache: 68 TB- 138TB Data: 320TB 1200TB 2x10GbE TOR 1x 1GbE Mgmt 1x R640 Mgmt Node N+2 Redundancy Deployment Integration and Implementation Support Included: Services (Integration and Implementation), Software 22 Note: VM sizes based on Azure D1 V2 VMs assuming 4:1 VCPU:CPU ratio Note: Capacities based on Raw

13g/14g Comparison 13g Sizes 14g Sizes Size Total Cores Memory (GB) SSD Cache (GB) HDD Capacity (GB) Size Total Cores Memory (GB) SSD Cache (GB) HDD Capacity (GB) Small 20 256 960 4000 Medium 24 384 1920 6000 Large 28 512 1920 8000 Small 24 384 960 4000 Medium 32 576 1920 8000 Large 48 768 1920 10000 23

Relative Workload Capacities - 13G vs 14G Workload Capacity Comparison 14G Large 4 Node 13G Large 4 Node 14G Medium 4 Node 13G Medium 4 Node 14G Small 4 Node 13G Small 4 Node 0 50 100 150 200 250 300 350 400 450 500 D2 VM (2 VCPU, 7GB RAM) D1 VM (1 VCPU, 3.5GB RAM) *Assumes 4:1 VCPU:CPU Ratio. 24

Portal /Azure Resource Manager Services for your entire cloud journey Scale on multiple fronts with Azure Stack Example: Global enterprise or service provider 1 One cloud endpoint Resource management Region 1 Region 2 Region 3 2 Multiple Single regions (future) 3 Multiple Single scale unit units per region (future) *Initially one region and one scale unit per region, future will support multiples 25

Software defined storage architecture Storage Spaces Direct - Single scalable pool with all disk devices (except boot) - Multiple virtual disks per pool (3-way Mirror) Software Storage Bus - Storage Bus Cache (Cache ratio target is 6 10% for WI SSDs and greater than 10% for MU SSDs) - Leverages SMB3 and SMB Direct Servers with local disks - Dell HBA330 Mini Integrated Storage Controller - Samsung or Intel SSDs Virtual Machines Scale-Out File Server CSVFS Cluster File System ReFS On-Disk File System Storage Spaces Virtual Disks Storage Spaces Storage Pool Software Storage Bus 26

Software defined and physical network architecture Infrastructure subnet To aggregation layer / border layer Storage subnet HLH Hyper-V NIC idrac Public VIPs subnet Public VIPs subnet Storage 1 Storage 2 Hyper-V Host Mgmt NIC HNV PA TEAM Transit Scale unit hosts idrac idrac Subnet Switch management Subnet OOB ToR Dell EMC Networking S3048-ON OOB Dell EMC Networking S4048-ON ToR Dell EMC Networking S4048-ON ToR Hardware Lifecycle Host - PowerEdge R430 PowerEdge R730xd PowerEdge R730xd PowerEdge R730xd PowerEdge R730xd 27

Key networking design considerations Dell EMC networking supports Azure Stack configurations Mellanox PCIe Ethernet Adapter in Host Dual-port 10 GbE RDMA for storage performance Offload and converged capabilities on the adapter Dell EMC Networking S4048-ON and S3048-ON support for Azure Stack requirements: Use BGP to discover SLB subnets on the physical network (or static routes can be employed) Data Center Bridging (DCB) to ensure QoS on converged fabric Enhanced Transmission Selection (ETS) Priority-based Flow Control (PFC) Segment OOB management traffic 28

Monitoring

42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 CISCO NEXUS 3172-10GE 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 CISCO NEXUS 3172-10GE FAIL OK N2200-PAC-400W N3K-C3048-FAN FAN STAT FAIL OK N2200-PAC-400W 50 50 51 52 51 52 53 54 53 54 MGMT 1 ID 0 CONSOLE STAT 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 Hardware Lifecycle Host Serves 3 Functions Initial software deployment of Azure Stack cluster Subsequent patch and update orchestration and deployment Hardware monitoring via Dell EMC Open Manage Essentials and Network Manager 30

Hardware monitoring and alerting Azure Stack Health and Alerts Alerts generated from: Internal Health Services System Health Tests Compute and Storage Health and Alerts Out of Band monitoring Devices and Components Open Manage Essentials Networking Health and Alerts Open Manage Network Manager Agentless monitoring of hyper-converged hardware using BMC Solution dependent on hardware vendor. 31

HA and DR Considerations

Admin space Tenant space Backup and Recovery SQL LRS blob replica, blob snap Dell EMC Data Protection VM VM IaaS VM SQL PaaS Tenant VM backup and restore User defined external SMB3 file share Azure Stack Infrastructure Infrastructure backup and restore 34

Infrastructure Backup Controller Azure Stack separates infrastructure data from tenant data Tenants of Azure Stack are responsible for protecting their workloads and backing up data Infrastructure data from multiple internal services is backed up by Azure Stack using the Infrastructure Backup Controller service Backup Configuration Backup occurs periodically with no admin intervention and no downtime to the portal experience or APIs Backup data is stored to an external/off-stamp SMB file share Infrastructure backup is enabled at Azure Stack deployment time. A file share UNC path and credentials are required After deployment, backup can also be enabled using UI or APIs Note: Traditional backup using Microsoft Data Protection Manager and Hyper-V capabilities are not used by Infrastructure Backup Controller 35

Tenant IaaS Protection At GA: Azure Site Recovery can protect Azure Stack VMs to Azure After GA: Failback from Azure A Azure Stack Infrastructure Backup/Restore In scope: Backup and restore of Azure Stack infrastructure service data Out of scope: Tenant/app data Backup target: external file share C D B IaaS VM Backup/Restore In scope: In-guest agent based backup and restore Out of scope: VM configuration Backup target: On-prem backup product B C IaaS VM Backup/Restore In scope: In-guest agent based backup and restore Out of scope: VM configuration Backup target: Cloud backup service Onpremises Backup Target A IaaS Azure Infrastructure PaaS Tenant space Admin space D IaaS VM Replication/Failover In scope: In-guest agent based replication Failover target: Orchestrate failover using ASR from Azure Stack to Azure External File Share 36

Portal /Azure Resource Manager Services for your entire cloud journey GA Fault Domain Example: Global enterprise or service provider 1 One cloud endpoint Resource management Region 1 2 Single region 3 Single scale unit *Initially one region and one scale unit per region, future will support multiples 37

Application HA/DR on Azure Stack In Scope for GA Scale-unit failover of VMs when a node fails Scale-unit planned failover of VMs during P&U Three copies of all tenant data in a scale-unit Automatic rebuild of data when a disk fails App across clouds instances for HA/DR 38

Maintainability: patch & update Pre-validated updates for software and firmware by Microsoft and partners. Rapid cadence of delivery, customer chooses when to apply. (3 month window) Automated application of updates across entire infrastructure. 39

Security and Compliance 40 40 Dell - Internal Use - Confidential

Security Principles: Assume Breach Constrained administration Predefined, whitelisted admin experience Fine-grained RBAC PowerShell JEA Locked down infrastructure Application whitelisting Least-privileged accounts No domain admin credentials Network ACLs No access to infrastructure components Simplified auditing No configuration needed Generated and centrally collected 41

Security Principles: Hardened by Default Data at rest encryption Network encryption Strong authentication between infrastructure components Security OS baseline Disabled legacy protocols (e.g. NTLM) HW security features (e.g. TPM, secure boot, UEFI) Windows Server 2016 security features Credential Protection (Credential Guard) Code Integrity (Device Guard) Antimalware (Windows Defender) 42

Azure Stack Compliance Technology Infrastructure xtenant Applications xpeople xprocess 43

Azure Services Coming to Azure Stack

Azure IaaS on-premises: beyond traditional virtualization Above services will be available at GA. We will deliver additional Azure services through frequent updates to Azure Stack. 45

Azure PaaS available on-premises: prescriptive platforms for high productivity development Azure Service Fabric will be in preview at GA. Other services will be available at GA. We will deliver additional Azure services through frequent updates to Azure Stack. 54

How are Azure Stack services different? Azure services on Azure Stack can sometimes contain differences due to the following reasons: 2016-03-01 2015-08-01 API Version Scale Dependencies 55

Additional Integration

Linux Distributions Marketplace Images Build your Own* CentOS Ubuntu Bitnami CoreOS SuSE RedHat Ubuntu Oracle CentOS Debian OpenSuSE/ SLES *Requires Azure Linux Agent 2.1.3+ https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-linux 58

Secure workloads anywhere in Azure KMIP Windows Server Active Directory Azure Key Vault HSM KMIP-compliant KMS Optional External Key Stores CloudLink Center VM VM VM Secure VM workloads Policy-based key release Flexible key management Leverages OS encryption Add-on option for data at rest encryption *Initially delivered via Dell EMC Consulting Services 59

What about Pivotal Cloud Foundry? One of the largest drivers of Azure Public Consumption Microsoft has invested heavily and wants to see this on Azure Stack Opens up additional Multi-Cloud options It s on the roadmap and likely a sooner rather than a later 60