Azure Network and Infrastructure
Download as PPTX, PDF1 like320 views
This document provides an overview of Azure network and infrastructure services including virtual networks, network security groups, VPN gateways, load balancers, and traffic manager. It discusses how to configure virtual networks with subnets, peer virtual networks, and use network interfaces. Public IP addresses, network security groups, and VPN gateways for connectivity are also covered. Examples of using these services to enable hybrid environments and load balancing of applications on VMs are provided.
Azure Network and Infrastructure
- 1. Azure Network & Infrastructure Phi Huynh R&D Manager NashTech Vietnam
- 2. Azure Infrastructure Services Virtual Network Network Security Groups VPN Gateway Agenda Load Balancer Demos (Azure Web Apps working with AzureVirtual Network)
- 4. Azure Infrastructure Services Storage Compute Network 1. File 2. Disk 3. Blob 4. Data Lake Storage 5. Archive 6. etc, … 1. Virtual Machine 2. VM Scale Sets 3. Functions 4. App Service 5. Cloud Services 6. Azure Migrate 7. etc, … 1. Virtual Network 2. Load Balancer 3. VPN Gateway 4. Traffic Manager 5. Express Route 6. Application Gateway 7. etc, …
- 5. Virtual Network Virtual Networks Database subnet Web subnet Internet Logical Isolation Stable & persistant IP Addresses Subnets with private IP Addresses Bring your own DNS Azure-provided DNS Works with AzureVM, Cloud Service andWeb Apps VM1 VM2 VM3 VM4 192.168.0.0/24 192.168.1.0/24
- 6. Virtual Network (10.1.0.0/16) Virtual Networks Peering VM1 Connect 2VNets in the same region Connection within Azure Infrastructure Must be no overlapping IP Addresses VM2 Virtual Network (10.2.0.0/16) VM3 VM4 PEERING
- 7. Virtual Network Network Interfaces (NIC) VM Internet One private, more publics Dynamic/Static internal IPAddress Dynamic/Static public IP Address Bind to Network Security Group Belong to aVNet NIC Public IP Address Private IPAddress
- 8. Virtual Network Public IP Addresses VM Internet On-Premises Dynamic/static Public IP Address (first-5 static for free) Instance Level Public IP Address (Classic) VIP (Classic) Reserved IP Address (Classic) VPN Gateway Site-to-site VPN Load balancer VM1 VM2 Public IP Public IP Public IP
- 9. Virtual Network Network Security Group Backend MidTier Frontend InternetOn-Premises DMZ Scenarios Access Control List Associate withVMs or Subnets ACL can be updated independently VPN Gateway Site-to-site VPN
- 10. Virtual Network Virtual Network Gateway Backend Frontend Enterprises Point-to-site Site-to-site & Multi-site VNet-to-VNet Express Route VPN Gateway Site-to-siteVPN (IPSec/IKE tunnel) VPN Client Point-to-siteVPN (SSTPTunnel) Virtual Network VPN Gateway Site-to-siteVPN (IPSec/IKE tunnel)
- 11. Load Balancer Hashed-based distribution Port forwarding Automatic configuration Service monitoring …
- 12. Application Gateway Web Appication Firewall HTTP Load Balancing Cookie-based session affinity SSL Offload Websocket Support …
- 13. Traffic Manager Improve availability Improve responsiveness Combine on-premises & cloud Distribute traffic for complex deployment
- 14. Managed Identity for Azure (formly name Managed Service Identity) … … … …
- 16. Virtual Network Demo Azure Web Apps working with AzureVNet Backend Frontend On-Premises Virtual Network Point-to-siteVPN Network Security Group Virtual Network Peering VPN Gateway Point-to-siteVPN … Internet 192.168.1.0/24 192.168.0.0/24
- 17. Assignment (Assignment could be done with a team) Create a virtual network Add machines to theVMs and deploy some applications on those machines Enabling load balancer / application gateway / traffic manager to the applications Enabling hybrid environment with point-to-site or site-to-siteVPN / hybrid connections BuildVirtual Network Service Endpoint for your Azure SQL Database
Editor's Notes
- #4: Tiết kiệm (pay-only-for-what-we-use) High availability Đội ngũ IT không cần quá đông Security tốt hơn Focus trên Business
- #5: Tiết kiệm (pay-only-for-what-we-use) High availability Đội ngũ IT không cần quá đông Security tốt hơn Focus trên Business Updade domain / Fault domain
- #6: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
- #7: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
- #8: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
- #9: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address
- #11: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways Site-to-site/vnet-to-vnet: IPSEC/IKE point-to-site: SSTP
- #12: https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview Layer 4 (TCP, UDP)
- #13: https://docs.microsoft.com/en-us/azure/virtual-network/resource-groups-networking
- #14: https://docs.microsoft.com/en-us/azure/traffic-manager/
- #17: https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-integrate-with-vnet
- #19: - Tren thuc te - Azure template