09-PaaS Compute Options Flashcards

1
Q

Azure App Service Plan

A

Define set of compute resources for web app to run

Determine performance, price, and features

One or more apps can be configure to run in the same App Service plan

Region where compute resources will be created
# of virtual machine instances
Size of virtual machine instances
Pricing tier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

App Service Plan Pricing Tiers

A

Free

Shared

Basic

Standard

Premium

Isolated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is Shared Compute

A

Free and Shared

Run apps on same Azure VM as other App Service apps, and the resources cannot scale out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Dedicated Compute

A

Basic, Standard, Premium

Run apps in the same plan in dedicated Azure VMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Isolated

A

Runs apps on dedicated Azure VMs in dedicated Azure virtual networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

App Service Plan Scaling

A

Scale up

Scale out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

App Service Plan Scale Out

A

Adjust available resources based on the current demand

Improve availability and fault tolerance

Scale based on a metric (CPU percentage, memory percentage, HTTP requests)

fill in

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Azure App Service

A

Fully managed environment enabling high productivity development

Platform-as-a-service (PaaS) offering for building and deploying highly available cloud apps for web and mobile

Platform handles infrastructure so developers focus on core web apps and services

Developer productivity using .NET .NET Core, Java, Python and host of others

Provide enterprise-grade security and compliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Creating an App Service

A

Name must be unique

Access using azurewebsites.net - can map to a custom domain

Publish code (Runtime Stack)

Publish Docker Container

Linux or Windows

Region closest to your users

App Service Plan

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Continuous Deployment

A

Work in a single source control

Whenever code updates are pushed to source control, then the website or web app will automatically pick up the updates

Continuous deployment workflow publishes the most recent updates from a project

Use portal for continuous deployments from GitHub, Bitbucket, or Azure DevOps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Deployment Slots

A

Validate code in live environment before publishing it

Can swap from staging from production and vice versa

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Creating Deployment Slots

A

Select whether to clone an app configuration from another deployment slot

When you clone, pay attention to the settings

Not all settings are sticky (endpoints, custom domain names, SSL certificates, scaling)

Review and edit your setting before swapping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Securing an App Service

A

Authentication

  • enable authentication
  • log in with 3rd party identity provider

Security

  • troubleshoot with diagnostics logs - failed request, app logging
  • add an SSL certificate - HTTPS
  • define a priority ordered allow/deny list to control network access to the app
  • store secrets in the Azure Key Vault
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Custom Domain Names

A

Redirect the default web app URL

Validate the custom domain in Azure

Use the DNS registry for your domain provider

fill in

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Backup an App Service

A

Create app backups manually or on a schedule

Backup the configuration, file content, and database connected to the app

Requires Standard or Premium plan

Backups can be up to 10 GB of app and database content

Configure partial backups and exclude items from the backup

Restore your app on-demand to a previous state, or create a new app

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Application Insights

A

Request rates, deny rates, response time and failure rates

Page view and load performance

User and session counts

Performance counters

Diagnostics and Exceptions

17
Q

Container vs Virtual Machine Features

A

Isolation

Operating System

Deployment

Persistent Storage

Fault Tolerance

18
Q

Azure Container Instance

A

Here Azure, this is my container, run it

19
Q

What are Container Groups

A

Top-level resource in Azure Container Instances

Collection of containers that get scheduled on the same host

Containers in the group share a lifecycle, resources, local network, and storage volumes

20
Q

What is Docker

A

Set of PaaS products

Enable developer to host application inside a container

Separate application from environment so it runs the same regardless of where is it hosted

21
Q

What is container

A

Standardized “unit of software” that contains everything required for an application to run.

Available on both Linux and Windows and can be hosted on Azure

22
Q

Docker Hub

A

Registry that houses the container images

Public registry

23
Q

Azure Kubernetes Service

A

You’re responsible only for managing the agent nodes

You pay only for the agent nodes

Enables nodes to be fully managed by Microsoft

Performs simple cluster scaling

Manages health monitoring and maintenance

24
Q

Pods

A

Groups of nodes with identical configuration

25
Q

Nodes

A

Individual VMs running containerized applications

26
Q

Pods

A

Single instance of an application. A pod can contain multiple containers

27
Q

Deployment

A

One or more identical pods managed by Kubernetes

28
Q

Manifest

A

YAML file describing a deployment

29
Q

Azure-managed nodes

A

Master node

Provides core Kubernetes services and orchestration

30
Q

Customer-managed nodes

A

Agent node

Run applications and supporting services

31
Q

AKS Networking

A

Pods run an instance of your application

32
Q

Three major networking services - AKS Networking

A

Cluster IP - Internal IP gets created. For internal traffic. Used by pods inside the cluster

NodePort - port mapping that allows you to access application. Use port and IP on virtual machine

Load Balancer - configure load balancer and external IP address

33
Q

AKS Storage

A

Local storage on node is fast and simple to use

Local storage might not be available after pod is deleted

Multiple pods may share data volumes

Storage could potentially be reattached to another pod

34
Q

AKS Security

A

Managed service - Limit access with authorized IP ranges, create a private cluster, use RBAD and Azure AD access

Cluster upgrades - Upgrade AKS cluster with cordon and drain

Node - Automatic OS security patches, Azure managed disks, pod security policies

Networks - Define ingress controllers with private internal IP address, filter the flow of traffic with network security groups

Data - Kubernetes secrets for credentials and keys

35
Q

AKS and Azure Active Directory

A

Use Azure AD as an integrated identity solution

User service accounts, user accounts, and role-based access control

36
Q

AKS Scaling

A

Applications might grow beyond the capacity of a single pod

Kubernetes has built-in autoscaler

Cluster autoscaler scales based on compute resources

Horizontal pod autoscaler scales based on metrics

37
Q

AKS Scaling to ACI

A

Azure Container Instance

If you need to rapidly grow your AKS cluster, you can create new pods in Azure Container instance

38
Q

Virtual Kubelet

A

Open-source Kubernetes kubelet implementation

Registers itself as a node and allows developers to deploy pods and containers with their own APIs

Supported by an ecosystem of providers