Infrastructure as a Service Solution Pitch Deck · 2017-10-07 · • Must be registered to earn,...

Rick McClive

AgendaPrevious Sessions:

Azure Virtual Machine sizing, deploying and estimating cost, Azure Storage Overview, VM Disks, StorSimple, and Ingram Micro Cloud Marketplace updates

This Session:

• Azure Networking – Basics, Security, Connectivity

• DEMO – Azure Networking and VPN Gateway

• Cost-estimation for Azure Networking and Gateways

Future Sessions:

Azure Active Directory, SQL in Azure

Cloud service models

Core services of Azure IaaS

30Gbps30Gbps

Accelerated NetworkingAccelerated Networking

30Gbps VM to VM bandwidth!

Accelerated Networking

Support expanded to 4 core VMs

Lower latency access to

ExpressRoute circuits

No additional cost

World’s fastest VMs in public clouds

You have control over: IP Addresses

Security policies

Route tables

DNS settings

Allows you to create both cloud and hybrid

connectivity

Top-level

resource

IP Address association Dynamic Static

Virtual machine Network interface Yes Yes

Load balancer Front end configuration Yes Yes

VPN gateway Gateway IP configuration Yes No

Application

gateway

Front end configuration Yes No

Top-level

resource

IP address association Dynamic Static

Virtual machine Network interface Yes Yes

Load balancer Front end configuration Yes Yes

Application

gateway

Front end configuration Yes Yes

Load Balancer

Application Gateway with WAF

Traffic Manager

3rd Party Solutions from Marketplace

Secure site-to-site VPN connectivity

• Connect to Azure compute from on-premises or another Azure region

Secure point-to-site connectivity

• POC Efforts• Small scale deployments• Connect from anywhere

ExpressRoute private connectivity

• Private connectivity from your on-premises data center to Azure virtual networks and PaaS Services

• Backup/DR, media, HPC

VNet Peeringwithin region

• In-region VNet-to-VNet connectivity• Direct VM-to-VM connectivity• Peer VNets for routing and transit

Internet Connectivity • Access over public IP• DNS resolution• Connect from anywhere

ExpressRoute

S2S VPN

P2S VPN

Customer’s Network

Azure Public Peering for Azure public IPs

Azure Private Peering for Virtual Networks

Microsoft Peering for Office 365 and Dynamics 365

Primary Connection

Secondary Connection

ExpressRoute Circuit

Microsoft

Edge

Partner

Edge

✔

✔

✔

✔

Marseille

Cape Town

Johannesburg

Coming soon

https://azure.microsoft.com/en-us/pricing/details/vpn-gateway/

VPN GATEWAY TYPE AGGREGATE THROUGHPUT S2S TUNNELS P2S TUNNELS

Basic 100 Mbps Max 10* Max 128*

VpnGw1 650 Mbps Max 30 Max 128

VpnGw2 1 Gbps Max 30 Max 128

VpnGw3 1.25 Gbps Max 30 Max 128

EXPRESSROUTE

GATEWAY TYPE

THROUGHPUT (UP TO) VPN GATEWAY/EXPRESSROUTE

COEXIST

Standard 1000 Mbps Yes

High Performance 2000 Mbps Yes

Ultra Performance 9000 Mbps Yes

https://azure.microsoft.com/en-us/pricing/details/vpn-gateway/

Simplifying the NSG Management

• Denying Outbound Internet access is common practice

• Automating NSG rules to whitelist Azure Datacenter IP ranges is tedious and error prone

• Introducing Augmented rules, comma separated list of IP address ranges

• Service Tags are named monikers for Azure Services that are usable in NSG

Network Security Group (NSG)

Actio

n

Name Source Destination Port

Allow AllowStorage VirtualNetwork IP1, IP2 … IP100 Any

Allow AllowSQL VirtualNetwork IP101, IP102 .. Any

Deny DenyAllOutBound Any Internet Any

Azure Services

Internet

Allow only Azure service traffic

Deny Internet outbound

Storage, SQL, AzureTrafficManager


Actio

n

Name Source Destination Port

Allow AllowStorage VirtualNetwork Storage Any

Allow AllowSQL VirtualNetwork Sql.EastUS Any

Deny DenyAllOutBound Any Any Any

Application Security Groups

Network security as natural extension of application architecture.

Security policies for dynamic workloads

Universal NSG:

Single policy for your virtual network


Action Name Source Destination Port

Deny BlockQuarantineVMs Any QuarantineVMs Any

Allow RemoteRDP VirtualNetwork WindowsVMs 3389 (RDP)

Allow RemoteSSH SysAdminVMs LinuxVMs 22 (SSH)

Allow AllowInternetToWeb Internet Web 80,8080 (HTTP)

Allow AllowWebToApp Web App 443 (HTTPS)

Allow AllowAppToDb App Db 3306 (MySQL)

Allow AllowMyOnPremises10.0.1.0/24,

192.168.2.1/25

13.68.1.64/28,

137.116.1.0/25,…80,8080, 443


Application Security Groups

Effortless scaling

Network security management simplified

Easy to manage, update and enforce new policies


Action Name Source Destination Port

Deny BlockQuarantineVMs Any QuarantineVMs Any

Allow AllowInternetToWeb Internet Web 80,8080 (HTTP)

Allow AllowWebToApp Web App 443 (HTTPS)

Allow AllowAppToDb App Db 3306 (MySQL)


Web App Db

QuarantineVMs

✔

✔

X

Global VNet Peering

Peering

Data transfer though private IPs

US West Canada Central

Peer VNets cross regions

Simple to setup (just a few clicks) and manage

Direct VM-to-VM connectivity across regions

Through Microsoft Backbone: no public internet

No bandwidth limitations

No extra hops

Scenarios:

o Data replication

o Database failover

Security & compliance

Monitoring Preview

IPv6 support

Merging of Microsoft Peering and Azure Public Peering Preview ExpressRoute

Circuit

Customer’s

networkMicrosoft

Edge

Partner

Edge

ExpressRoute

Circuit

Customer’s

networkMicrosoft

Edge

Partner

Edge

https://azure.microsoft.com/en-us/blog/azure-networking-announcements-for-ignite-2017/

https://azure.microsoft.com/en-us/blog/azure-networking-announcements-for-ignite-2017/

The first and last IP addresses of the subnets are reserved (for subnet address and multicast), along with 3 more addresses used for Azure services (For DHCP and DNS purposes)

Web and mobile Line of business apps like SAP,SharePoint

Microservice apps

Dev and test Big data and analytics

Internet of Things

Backup, recovery, and archive

High performance computing

Digital media

Typical starting points on IaaS

INGRAM MICRO Our Team Is Here To Help You

West Region

Amir Sedehi

Market Development Executive

(714) 382-4680

Mike O’Donnell

Channel Account Executive

Dynamics 365

(800) 456-8000 x67012

Leanne Chapin

Channel Account Specialist II

Platform

(800) 456-8000 x67156

Jill Idziak


Cloud

(800) 456-8000 x66432

Evan Bould


Cloud Branch K5 Only

(800) 456-8000 x66626

TBD


Platform & Cloud, SMB

(800) 456-8000 xTBD

Central Region

TBD

Market Development Executive

(800) 456-8000 xTBD

Mike O’Donnell


Dynamics 365

(800) 456-8000 x67012

TBD

Channel Account Specialist

Platform

(800) 456-8000 xTBD

Rob Gugliuzza

Sr. Channel Account Specialist

Cloud

(800) 456-8000 x65377

Evan Bould


Cloud

Central: KS, OK, AR, TX, LA

(800) 456-8000 x66626

James Currey


Central: ND, SD, NE, MN, IA,

WI, IL, MO, IN, KY, OH, MI, TN

(800) 456-8000 x67215

Kalie Michalski



(800) 456-8000 x67794

East Region

Dan Eyrick

Market Development

Executive

(800) 456-8000 x67376

Mike O’Donnell


Dynamics 365

(800) 456-8000 x67012

Ray Sallaj


Platform

(800) 456-8000 x67037

Jeff Fabin


Cloud

(800) 456-8000 x65360

James Currey


Cloud Y2 Only

(800) 456-8000 x67215

Casey Woodlock



(800) 456-8000 x66977

Microsoft Specialists

Talia Love

Sales Supervisor

Surface

Chuck Hayes


Surface

Patrick Flatley

Market Development Specialist

Surface

Technical Experts

David Priebe

Microsoft Technical Solutions Engineer

Rick McClive

Technical Account Manager -

Microsoft Azure

(800) 456-8000 x66569

Jorge Wong

Technical Account Manager -

Microsoft Azure

(800) 456-8000 x66219

SPLA

Danielle Huegel


– SPLA

(800) 456-8000 x67294

KatieLynn Meyers


SPLA

(800) 456-8000 x67767

ND

SD

NE

KS

MN

IA

MO

MI

IN OH

KY

TN

WI

IL

OK AR

LATX

WA

OR ID

MT

WY

NV UT CO

AZ NM

MS AL

FL

GASC

NC

WVVA

MDDE

NY

VTNH

CTRI

ME

MA

PA

NY

SoCal

NorCal

HI

NJ

Confidential and proprietary information of Ingram Micro Inc. – Do not distribute or duplicate without Ingram Micro’s express written permission.

Microsoft Licensing Desk:

Microsoft-

[email protected]

800-456-8000 x 76163

Cloud One-Stop Team

For all your Microsoft Cloud

needs email:

Microsoft-

[email protected]

Microsoft Pre-Sales Technical Support

(800) 445-5066 x76291

Deliver the Modern Workplace:

30 DAYS FREE on select Microsoft CSPDid you know? Ingram Micro has delivered this promotion to partners for the last

three quarters and paid out over $1,000,000 in 2017 thus far. This number will

continue to grow, so be sure you’re one of the partners earning credit.

Receive the first 30 Days FREE for all net new seats of:

• Microsoft 365 CSP Business

• Microsoft 365 CSP Enterprise

• Office 365

• Enterprise Mobility + Security

• Dynamics 365 for Financials

• Dynamics 365 for Team Members

• Windows 10 Enterprise Subscription (WES)

Grow the Intelligent Cloud:

30% OFF all new Azure CSP tenantsDid you know? Partners that participate in Ingram Micro’s

Azure promotion deploy new tenants 50% faster than their

peers!

Promotion T&Cs:• Final day to register is 12/27/17. Final eligible date to earn is 12/30/17.

• Must be registered to earn, IE: Register on 10/16/17, all orders placed on that date forward will qualify for credit.

• All net new seats (O365,D365 for Financials, EM+S, WES) must stay with Ingram Micro for at least 18 months.

• Only monthly SKUs apply

• One-time project based does not qualify.

• Credit will be issued as an Ingram Micro Cloud Marketplace credit within 90 days of promotion ending.

• Microsoft qualified SMB customers only; no major accounts.

• Promotion may change or end without notice.

Questions? Contact Us:

[email protected]

Register for Promo

Earn BIG and Maximize Profit with Microsoft CSPIngram Micro Exclusive

Let’s say the

tenant is

created on

10/16/17

Tenant consumes usage over the first month and

Ingram issues an invoice for the consumed usage

between 11/16/17 – 1/30/18.Credit

issued:

$73530% off

Nov Dec Jan Total Invoice

$700 $800 $950 $2,450

Earn a credit of 30% OFF your first quarter’s worth of Azure consumption

(invoiced between 11/9/17 and 1/30/18) for all new tenant subscriptions. Must be

registered before the tenant is issued to qualify.

Make it real:

Sign up and earn:

Oct 9 – Dec 30, 2017

mailto:[email protected]

https://channelmarketing.wufoo.com/forms/q6d01a3031jlhu/

https://channelmarketing.wufoo.com/forms/q6d01a3031jlhu/

Are you ready to accelerate your Azure practice?

Get a jump start with the Azure Acceleration Kits.

The Azure Acceleration Kits include:

Free 30-Days Advanced Support from Microsoft

Free migration and assessment services

Ingram Micro “Easy Azure” configuration guides

Lucrative promotions and discount offers

Sales and technical in person and virtual workshops

IaaS expert led 1:1 consulting and trainings

Azure Acceleration Kits

Easy Azure Starter KitAre you ready to get started with IaaS

but aren’t quite sure how? Or do you

need a simple service like backup?

Azure Enablement KitLearn not just the “how” but the “why”

and the “when” to incorporate an IaaS

solution like Azure into your business.

Azure Expert KitEngage a team of Azure technical experts and

post-sales solutions architects. Advanced

Support for Partners, migration/assessment

promotions, VIP training, and consult services

are all included.

Get started at the Azure Expert Zone:

http://www.ingrammicrocloud.com/microsoft/


Bite Size Azure Series

Featuring Jason Lambert,

Cloud Technical Consultant

for Microsoft Azure at

Ingram Micro

Jumpstart your Azure proficiency with Ingram Micro Cloud.

Bite Size Azure is a series of quick sales and technical videos

addressing overviews, frequently asked questions, and best

practices to make Azure easier to digest.

These short videos focus on a range of topics including:

What is Microsoft Azure?

Microsoft Azure Open vs CSP

I purchased Microsoft Azure through Ingram Micro, now what?

Microsoft Azure Calculator General Overview

Microsoft Azure CSP Process Doc

..and many more!

https://www.youtube.com/user/IngramMicroServices/playlists

LEARN MORE AT

BITE SIZE AZURE

What’s Your Altitude in the Cloud?

The 2112 Group, Ingram Micro Cloud, and Microsoft

have formed an alliance to deliver to partners like

you a new tool for understanding your relative

competitive state in the cloud computing market.

What will you gain from the Cloud Altimeter

assessment?

Actionable insights and analysis on your state of

cloud readiness

Understanding of your relative competitive

position in the marketplace

New cloud development strategies to increase

cloud services performance and generate higher

returns on investmentTake Your Assessment

http://the2112group.com/2112-cloud-altimeter/

Microsoft MicrositeWe are pleased to announce our newly

revamped microsite solely dedicated to

all things Microsoft!

Our new Microsoft Microsite includes:

• Upcoming webinars and past webinar

recordings/ presentation decks

• Partner promotions

• Event information such as Ingram Micro ONE,

Cloud Summit, and Microsoft Inspire

• Information on programs such as Azure Starter

Kit and the Cloud Referral Program



© 2016 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.

The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market

conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation.

MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Infrastructure as a Service Solution Pitch Deck · 2017-10-07 · • Must be registered to earn,...

Documents

Transcript of Infrastructure as a Service Solution Pitch Deck · 2017-10-07 · • Must be registered to earn,...