Cloud OS Customer-Ready Services -...

Post on 20-May-2020

2 views 0 download

Transcript of Cloud OS Customer-Ready Services -...

Web

Platform

application

Services

(PaaS)

Infrastructure

Services

(IaaS)

Reliable

messaging

Virtual

Networking

SQL Server

and MySQL

database

Cloud OS Customer-Ready Services

ON-PREMISES

SERVICE PROVIDERMICROSOFT

CONSISTENTPLATFORM1

R2 w/ Service Provider Foundation

Future

ServicesService

BusSQLVMs

Web

Sites

Service

Plans

Users Provider Portal

Consumer Self-Service

Portal

Web Sites

Apps

Database

VMs

Service ProviderCustomer

Self Service Portal

Moves On-Premises

Common Mgt. Experience

Workloads

Cloud-Enabled Services Move On-Premises

Consistent Dev. Experience

Other

ServicesCDN.

Media,, etc.

CachingService

BusSQLVMs

Web

Sites

Worker

Role

Web Sites

Apps

Database

VMs

Subscriber Self-Service

Portal

Windows Azure

R2

Cloud OS Consistent Experiences

Architecture

Deployment Architecture

• simple, fast

production environmentsOffers flexibility to deploy based on customer requirements

Performance and Scale

Security

Availability

Management

Database

High Privileged Services

+ Internet Facing

Providers

Internet Facing

High Privileged

Services

Providers

Management

Database

Identity

Federation

WAP Authentication Claims-Based authentication using JWT tokens

Federated Identities through ADFS

ADFS federation with Third Party Identity Providers Supported Protocols : SAML 2.0, WS-*

Supported Tokens: SAML, JWT

Example Identity Stores Active Directory (AD), Ping, Azure Active Directory, etc…

Tenant Authentication Site (ASP.NET membership provider)

Portal Login Scenario using Claims

ASP.Net

ADFS

3rd party

Portal

Identity

Provider with

Secure Token

Service

1. User without Claims

2. User is redirected to STS (multiple redirects*)

3. User Enters Credentials

4. User is authenticated & Claim

Token is issued to the user

5. User uses claim to access Portal

6. Portal Grants access to Resources

STEPS

1

3

4

5

6

User2

Enabling Service

Combine hosts and

networks, storage, and

library resources

together to create a

service provider cloud.

Delegate access to

self-service users and

let them manage cloud

resources and create

services

Deploy VMs to private

clouds or hosts by

using VM templates

Create a cloud by

moving the underlying

resources of network,

storage, & compute

into the cloud.

Configure the

fabric

Create a cloud

from the fabric

Delegate the

cloud to a self-

service user

Deploy VMs

.ResdefPkg

• Resdef file

• Viewdef file

• Icon

• Language

directories and files

.ResextPkg

• Resext file

• Script Payload

• Application Payload

Enabling Service

Automation

Optimize and extend services

using runbooks

Powershell workflows

Web-based runbook authoring

Manage runbooks and jobs

Integrates with other systems

including System Center

CMDB

Ticketing

Billing

Management

Systems

Web based Runbook Authoring:

Service Administrator can create runbooks to

automate all aspects of cloud infrastructure,

plan delivery, and maintenance activities

Highly Available Engine

Support requirements for scale and H/A.

Built on PowerShell Workflow

Integration into other systems:

Import PS modules and create additional

modules and runbooks for existing resources or

to connect into 3rd party systems (ticketing

system, billing system, user store, CMDB)

AutomationVIRTUAL MACHINE

CLOUDS

12

SQL SERVER

9

PLANS

12

WEBSITE CLOUD

12

MYSQL SERVERS

0

NOTIFICATIONS

0

USER ACCOUNTS

4

AUTOMATION

8

ALL

ITEMS

• Integrate into existing systems to orchestrate & automate end to end processes

• Out of the box runbooks to automate delivery of cloud services

• Import additional integration modules and author PowerShell Workflow runbooks within Service Management portal

• Operational dashboard for analysis and troubleshooting

Integration Orchestration Automation

Enabling Service

Usage and Reporting

Continuous usage metering

per tenant subscription

Per-subscription Billing APIs

IaaS Data Warehouse

Server Inventory Reports

Usage and Reporting

Customize and Extend to Meet Your Needs

CustomizeManage Extend

Easily skin portal with

your theme and brand

Custom login, logos,

banner, colors, extensions,

etc…

Replace the portal with

your own by providing

support for the API

Designed for providers

offering services to tenants

Plans and Subscriptions

Usage Metering / Billing

Identity using ADFS

Portal, API and

Powershell interfaces

Manage tenant

resources via REST APIs

Modular approach

enables extensibility to

add new services as

resource providers

R2 w/ Service Provider Foundation

Service

BusSQLVMs

Web

Sites

Service

Plans

Users Admin Site

Tenant SiteWeb Sites

Apps

Database

VMs

Service ProviderCustomer

Custom Resource Provider

R2 w/ Service Provider Foundation

Service

BusSQLVMs

Web

Sites

Service

Plans

Users Admin Site

Tenant SiteWeb Sites

Apps

Database

VMs

Service ProviderCustomer

Custom Resource Provider

Why ?• Finance Management

• Billing, eCommerce, Reporting,

Chargeback

• Support Request Management

• Integrate with existing Services• Public Azure, AWS, Backup, DNS,

Analytics, etc.

Partner Involvement

Cloud-enabled System Center stack

Azure investments brought to on-premise and hosted clouds

Cloud OS consistency across all clouds

Leverages existing investments

System Center 2012 R2

Windows Server 2012 R2

Windows Azure Pack

ios (version 6 or below):

Please input the below URL:

http://aka.ms/MDC245

Other platform:

QR Code: