Azure for Architects电子书

Title Page

Copyright and Credits

Azure for Architects Second Edition

About Packt

Why subscribe?

Packt.com

Contributors

About the author

About the reviewers

Packt is searching for authors like you

Preface

Who this book is for

What this book covers

To get the most out of this book

Download the example code files

Conventions used

Get in touch

Reviews

Getting Started

Cloud computing

Advantages of cloud computing

Deployment Patterns in Azure

Infrastructure as a Service

Platform as a Service

Software as a Service

Understanding Azure

Azure as an intelligent cloud

Azure Resource Manager

The ARM architecture

Limitations of Azure Service Manager (ASM)

ARM advantages

ARM concepts

Resource providers

Resource types

Resource groups

Resource and resource instances

ARM features

Virtualization

Containers

Docker

Interacting with the intelligent cloud

Azure Portal

PowerShell

Azure Command-Line Interface (CLI)

Azure REST API

ARM templates

Deployments

Summary

Azure Solution Availability and Scalability

High availability

SLA

Factors affecting high availability

Planned maintenance

Unplanned maintenance

Application deployment architecture

High availability versus scalability

High availability versus disaster recovery

Azure high availability

Concepts

Availability sets

Fault domain

Update domain

Availability zones

Load balancing

VM high availability

Compute high availability

Storage high availability

PaaS high availability

High-availability platforms

Data high availability

Azure CosmosDB

Azure SQL replication

Azure table storage

Application high availability

Load balancing

Azure load balancers

Public load balancing

Internal load balancing

Port forwarding

Azure application gateway

Azure Traffic Manager

Architectural considerations for high availability

High availability within Azure regions

High availability across Azure regions

Best practices

Application high availability

Deployment

Data management

Monitoring

Scalability

Scalability versus performance

Azure scalability

Concepts

Scaling

Scaling up

Scaling down

Scaling out

Scaling in

Auto scaling

PaaS scalability

PaaS – Scaling up and down

PaaS – Scaling out and in

IaaS scalability

VM scale sets

VMSS architecture

VMSS scaling

Horizontal versus vertical scaling

Capacity

Auto scaling

Upgrades and maintenance

Application updates

Guest updates

Image updates

Best practices of scaling provided by VMSS

The preference for scaling out

Bare-metal versus dormant instances

Configuring the maximum and minimum number of instances appropriately

Concurrency

Stateless

Caching and CDN

N+1 design

Summary

Security and Monitoring

Security

Security life cycle

Azure security

IaaS security

Network Security Groups

NSG design

Firewalls

Firewall design

Reducing the attack surface area

Implementing jump servers

PaaS security

Operations Management Suite (OMS)

Storage

Azure SQL

Azure Key Vaults

Security monitoring and auditing

Azure Monitor

Azure Security Center

Monitoring

Azure monitoring

Azure activity logs

Azure diagnostic logs

Azure application logs

Guest and host operating system logs

Azure Monitor

Azure Application Insights

Azure Log Analytics

Application Insights

Provisioning

Log Analytics

Provisioning

OMS agents

Search

Solutions

Alerts

Executing runbooks on Alerts

Integrating PowerBI

Summary

Cross-Subscription Deployments Using ARM Templates

ARM templates

Deploying resource groups with ARM templates

Deploying resources across subscriptions and resource groups

Another example of cross-subscription and resource-group deployments

Deploying cross-subscription and resource-group deployments using linked templates

Summary

ARM Templates - Modular Design and Implementation

Problems with the single template

Reduces flexibility in changing templates

Troubleshooting large templates

Dependency abuse

Reduced agility

No reusability

Understanding the Single Responsibility Principle

Faster troubleshooting and debugging

Modular templates

Deployments resources

Linked templates

Nested templates

Free-flow configurations

Known configurations

Summary

Designing and Implementing Serverless Solutions

Serverless

The evolution of serverless

Principles of serverless technology

Azure Functions advantages

FaaS

Azure Functions runtime

Azure Functions bindings and triggers

Monitoring

Authentication and authorization

Azure Functions configuration

Platform configuration

App Service Function settings

Azure Functions cost plans

Azure Functions use cases

Types of Azure Functions

Creating your first Azure Functions

Creating an event-driven Function

Function proxies

Understanding workflows

Durable Functions

Steps for creating a Durable Functions

Creating a connected architecture with Functions

Summary

Azure Integration Solutions

Azure Event Grid

Event Grid architecture

Resource events

Custom events

Azure Logic Apps

Activity

Connectors

Working on a logic app

Creating an end-to-end solution using Serverless technologies

Problem statement

Vision

Solution

Architecture

Azure Automation

Custom Azure Event Grid topic

Azure Logic Apps

Azure Functions

Prerequisites

Implementation

Step 1

Step 2

Step 3

Step 4

Step 5

Step 6

Step 7

Step 8

Step 9

Step 10

Step 11

Testing

Summary

Cost Management

Understanding billing

Invoicing

Enterprise agreement customers

Usage and quotas

Resource providers

The usage and billing APIs

Azure pricing models

Azure Hybrid Benefit

Azure reserved virtual machine instances

Pay-as-you-go accounts

Enterprise Agreements

The cloud solution provider model

The Azure pricing calculator

Best practices

Compute best practices

Storage best practices

Platform-as-a-Service (PaaS) best practices

General best practices

Summary

Designing Policies, Locks, and Tags

Azure tags

Tags with PowerShell

Tags with Azure Resource Manager templates

Resource groups versus resources

Azure policies

Built-in policies

Policy language

Allowed fields

Azure locks

Azure RBAC

Custom Roles

How are locks different from RBAC?

An example of implementing Azure governance features

Background

RBAC for Company Inc

Azure policies

Deployments to certain location

Tags of resources and Resource Groups

Diagnostic logs and Application Insights for all resources

Azure Locks

Summary

Azure Solutions Using Azure Container Services

Azure Container Registry

Azure Container Instances

Azure Kubernetes Service

Kubernetes architecture

Master nodes

Pods

API server

Kubelets

Kube-Proxy

Replication controller/controller manager

Azure Kubernetes architecture

Provisioning Azure Kubernetes Service

App Service containers

Comparing all container options

Containers on virtual machines

Containers on virtual machines with Kubernetes as the orchestrator

Azure Kubernetes Service

Containers on Azure App Service

Containers in Azure Container Instances

Containers in Azure Functions

Containers in Service Fabric

Summary

Azure DevOps

DevOps

DevOps practices

Configuration management

Desired State Configuration

Chef, Puppet, and Ansible

ARM Templates

Continuous integration

Build automation

Test automation

Packaging

Continuous deployment

Test environment deployment

Test automation

Staging environment deployment

Acceptance tests

Deployment to production

Continuous delivery

Continuous learning

Azure DevOps

Team Foundation Version Control

Git

Preparing for DevOps

Provisioning Azure DevOps organization

Provisioning the Azure Key Vault

Provisioning a configuration-management server/service

Provisioning log analytics

Azure Storage account

Source images

Monitoring tools

Management tools

DevOps for PaaS solutions

Azure App Services

Deployment slots

Azure SQL

The build-and-release pipeline

DevOps for virtual machine (IaaS)-based solutions

Azure Virtual Machines (VM)

Azure public load balancers

The build pipeline

The release pipeline

DevOps for container-based (IaaS) solutions

Containers

Docker

Dockerfile

The build pipeline

The release pipeline

Azure DevOps and Jenkins

Azure Automation

Provisioning the Azure Automation account

Creating DSC configuration

Importing the DSC configuration

Compiling the DSC configuration

Assigning configurations to nodes

Browsing the server

Azure for DevOps

Summary

Azure OLTP Solutions Using Azure SQL Sharding, Pools, and Hybrid

Azure cloud services

OLTP applications

Relational databases

Deployment models

Databases on Azure virtual machines

Databases hosted as managed services

Azure SQL Database

Application features

Single instance

High availability

Backups

Geo-replication

Scalability

Security

Firewall

Azure SQL Server on dedicated networks

Encrypted databases at rest

Dynamic Data Masking

Azure Active Directory integration

Elastic pools

Managed Instance

SQL database pricing

DTU-based pricing

vCPU based pricing

How to choose the appropriate pricing model

Summary

Azure Big Data Solutions Using Azure Data Lake Storage and Data Factory

Data integration

ETL

A primer on Data Factory

A primer on Data Lake Storage

Understanding big data processing

Ingestion

Processing

Storage for consumption

Presentation of data

Migrating data from Azure Storage to Data Lake Gen2 Storage

Preparing the source storage account

Provisioning a new resource group

Provisioning a storage account

Creating a new Data Lake Gen2 service

Creating a new Data Factory pipeline

Repository settings

Creating the first dataset

Creating the second dataset

Creating a third dataset

Creating a pipeline

Add one more copy data activity

Publishing

Final result

Summary

Azure Stream Analytics and Event Hubs

A primer on Event Hubs

Events

Event streaming

Event Hubs

Architecture of Event Hubs

Consumer groups

Throughput

A primer on Stream Analytics

Hosting environment

Streaming units

A sample application using Event Hubs and Stream Analytics

Provisioning a new resource group

Creating an Event Hubs namespace

Creating an event hub

Provisioning logic apps

Provisioning the Storage account

Creating a storage container

Creating Stream Analytics jobs

Running the application

Summary

Designing IoT Solutions

IoT

IoT architecture

Connectivity

Identity

Capture

Ingestion

Storage

Transform

Analytics

Presentation

Azure IoT

Identity

Capture

Ingestion

Storage

Transform and analytics

Presentation

IoT Hubs

Protocols

Device registration

Message management

Device-to-cloud messaging

Cloud-to-device messaging

Security

Security in IoT

Scalability

SKU edition

Units

High availability

Summary

Other Books You May Enjoy

Leave a review - let other readers know what you think