Implementing Azure Solutions电子书

Title Page

Copyright

Credits

About the Authors

About the Reviewers

www.PacktPub.com

Customer Feedback

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the color images of this book

Errata

Piracy

Questions

Getting Started with Azure Implementation

Service models

Deployment models

Cloud characteristics

Microsoft Azure

Azure services overview

Azure basics

Azure Resource Manager

Resources

Azure regions

Azure Portal

Azure automation

Azure Automation tools

REST APIs

Summary

Azure Resource Manager and Tools

Understanding the Azure resource manager

Functionalities provided by the Azure resource manager

Working with the Azure resource manager

Creating an Azure resource group

Adding a resource to an Azure resource group

First approach - adding a storage account to your Azure resource group

Second approach - adding a storage account to your Azure resource group

Third approach - adding a storage account to your Azure resource group

Tagging in the Azure resource manager

Locking Azure resources

Azure resource locks

Working with ARM templates

Exporting a deployment as an ARM template (for IT pros)

Example 1: exporting a resource group to an ARM template

Example 2: exporting a resource (from the deployment history) to an ARM template

Example 3: exporting a resource (classic) to an ARM template

Modifying an ARM template

Authoring an ARM template

Creating your own ARM template (for developers)

Azure resource explorer

Summary

Deploying and Synchronizing Azure Active Directory

Azure Active Directory

Azure Active Directory options

Azure AD free

Azure AD basic

Azure AD premium P1

Deploying a custom Azure AD

Adding accounts and groups to Azure AD

Azure AD Connect high available infrastructure

Summary

Implementing Azure Networks

Azure networking limits

Azure networking components

Azure virtual networks (VNet)

VNet peering

Azure VPN gateways

Azure local gateway

Azure ExpressRoute

Azure global Points of Presence

National Azure Points of Presence

Azure connections

Azure routes

Azure third-party network devices

Azure load balancer

Hash-based distribution

Port forwarding

Automatic reconfiguration

Service monitoring

Azure application gateways

Azure Traffic Manager

Azure DNS

Setting up Azure networks

Setting up Azure VNet

Setting up Azure virtual network site-to-site VPN

Configuring local network gateway

Configuring Azure virtual network gateway

Configuring connection between local and virtual network gateways

Setting up Azure virtual network with MPLS and ExpressRoute

Configuring Azure virtual network gateway

Configuring Azure ExpressRoute circuit

Configuring connection between ExpressRoute circuit and Azure virtual gateway

Setting up Azure VNet peering

Preparing the deployment

Configuring VNet peering

Configuring custom routes

Configuring third-party network appliances

Common Azure network architectures

Summary

Implementing and Securing Azure Storage Accounts

Storage accounts

General purpose Storage account

Blob Storage account

Replication and redundancy

Locally redundant storage

Zone-redundant storage

Geo-redundant storage

Read-access geo-redundant storage

Azure Storage services

Blob Storage services

Table storage services

Queue storage services

File storage services

Access keys

Exploring Azure Storage with Azure Storage Explorer

Premium Storage account

Premium storage requirements

Pricing

Summary

Planning and Deploying Virtual Machines in Azure

Azure virtual machine types

A-series virtual machines

D-series and DS-series virtual machines

F-series and FS-series virtual machines

G-series and GS-series virtual machines

H-series virtual machines

NV-series and NC-series virtual machines

NV virtual machines

NC virtual machines

Ls-series virtual machines

Virtual machine extensions

Managed Disks

Availability sets

Deploying a virtual machine in Azure

Accessing a virtual machine in Azure

Changing IP and DNS settings

Common scenarios for virtual machines

Optimization of Azure related communication traffic

On-demand usage for calculations

Disaster recovery for on-premises servers

Summary

Implementing Azure Cloud Services

What is an Azure Cloud Service?

Understanding the Cloud Service architecture

Roles

The service endpoint

Going deeper into the Cloud Services

Service Definition File

LoadBalancerProbes

WebRole

WorkerRole

NetworkTrafficRules

Service configuration file

Role

NetworkConfiguration

Azure Cloud Services versus other Azure PaaS offerings, such as Azure App Services

Selection of a Guest OS and an update level

Selection of an Azure series

series A

series D

series F

series G

series N

series H

In a nutshell

Creating your first Azure cloud service

Part 1

Part 2

Summary

Implementing Azure Container Service

What is an Azure Container Service?

Understanding containers

Cluster

Orchestrator

Mesosphere DC/OS

Docker swarm

Kubernetes

Creating your first Azure Container Service

How to work with your Azure container service cluster

Summary

Implementing Azure Security

Azure Identity Security

Azure Active Directory

Azure Active Directory editions

Privileged Identity Management

Identity protection

Detection of vulnerabilities and potential risky accounts

Investigation of potential suspicious events

Multi-factor authentication

Conditional access

Resource security

Role-based Access Control

Resource tags and policies

Azure network security

Network security groups

Priority

Source

Destination

Network virtual appliances

Azure Storage security

Key management

Shared access signatures

Service-level SAS

Account-level SAS

Storage Encryption

Storage account encryption

Azure disk encryption

Logging and monitoring

Azure Logs

Azure Security Center

Summary

Skill Wrap Up and Migration Scenario

On-premises infrastructure scenario

Background network infrastructure

Background information on Microsoft Active Directory

Background information on Microsoft Exchange Server

Background information on Microsoft SharePoint Server

Background information on Microsoft Skype for Business Server

Background information one document management system based on SMB shares

Background information on public website based on TYPO3 CMS

Background information on backup services

Background information on file servers

Customer requirements

Solution in Azure

Solution for a wide area network

Solution for point-to-site VPN and GeoIP/DNS

Solution for Azure LAN integration

Solution for identity and access management

Solution for SharePoint services

Solution for Exchange services

Solution for document management system

Solution for file services

Personal homeshares

No ACL shares

Classic shares

Solution for a public website with TYPO3 CMS

Solution for backup services

Summary

Azure Price Calculator

Azure TCO and RIO Calculator