Describe Azure compute and networking services Flashcards
Azure Virtual Machines
-Infrastructure as a Service (IaaS)
-Total control over the operating system and the software
-Supports marketplace and custom images
Best suited for:
-Custom software requiring custom system configuration
-Lift-and-shift scenarios
Can run any application/scenario: Web apps & web services, Databases, Desktop applications, Jumpboxes, Gateways, etc.
Virtual Machine Scale Sets
-Infrastructure as a Service (IaaS)
-Set of identical virtual machines
-Built-in auto scaling features
-Designed for manual and auto-scaled workloads like web services,* batch processing, etc.
-Manage and autoscale your VM pool based on customizable metrics, and consistently control and deploy VM updates
-Optimize costs by minimizing the number of unnecessary VM instances
-Increase application uptime by using availability zones and availability sets to automatically distribute VMs
VM Available Sets
Availability sets are designed to ensure that VMs stagger updates and have varied power and network connectivity, preventing you from losing all your VMs with a single network or power failure.
Availability sets do this by grouping VMs in two ways: update domain and fault domain.
-Update domain: The update domain groups VMs that can be rebooted at the same time. This allows you to apply updates while knowing that only one update domain grouping will be offline at a time.
-Fault domain: The fault domain groups your VMs by common power source and network switch. By default, an availability set will split your VMs across up to three fault domains.
Best of all, there’s no additional cost for configuring an availability set. You only pay for the VM instances you create.
Azure Functions (Function Apps)
-An event-driven, serverless compute platform that helps you develop more efficiently using the programming language of your choice
-Platform as a Service
-Scales up and down very quickly
-Supports popular languages and frameworks
Two hosting/pricing models:
-Consumption-based plan
-Dedicated plan
-Designed for micro/nano-services
Azure Virtual Desktop
Is a desktop and application virtualization service that runs on the cloud. It enables you to use a cloud-hosted version of Windows from any location. Azure Virtual Desktop works across devices and operating systems, and works with apps that you can use to access remote desktops or most modern browsers.
Containers
-Use host’s operating system
-Emulate operating system (VMs emulate hardware)
-Lightweight (no O/S)
Development Effort:
-Maintenance
-Compute & storage requirements
-Respond quicker to demand changes
-Designed for almost any scenario
Azure Container Instances
-Simplest and fastest way to run a container in Azure
-Platform as a Service
-Serverless Containers
Designed for:
-Small and simple web apps/services
-Background jobs
-Scheduled scripts
Azure Kubernetes Service (AKS)
-Open-source container orchestration platform
-Platform as a Service
-Highly scalable and customizable
-Designed for high scale container deployments (anything really!)
AKS can use images (either from a container repo or a public repo) and spread this across nodes (nodes underneath VMs), they are separated and abstracted from you. Kubernetes is managing the deployment of containers across those nodes. Once the deployment is finished, it exposes everything to users or applications through a Load Balancer
Azure App Service
Is a fully managed platform for building, deploying, and scaling web applications.
-Designed as enterprise grade web application service
-Platform as a Service
-Supports multiple programming languages and containers
-Built-in autoscale and load balancing
-High availability with auto-patching
Web App: Azure App Service primarily focuses on hosting web applications, including websites, APIs, and mobile app backends.
Azure Virtual Network
-Logically isolated networking components
-Segmented into one or more subnets
-Subnets are discrete sections
-Enable communication of resources with each-other, internet and on-premises
-Scoped to a single region
-VNet peering or VPN Gateway, allow cross region communication
-Isolation, Segmentation, Communication, Filtering, Routing
-Network Security Groups (NSGs) work on both subnet and instance levels.
-SGs can be associated with subnets or individual virtual machine (VM) network interfaces
-Stateful
Azure Batch
Is a compute management platform from Azure that allows for large-scale parallel batch workloads to be run in the cloud. Azure Batch has made the provisioning of many scalable high-performance resources easy and affordable to end-users.
Use cases can thus include:
-Engineering simulations – e.g. running simulations for each machine in parallel
-Deep learning and Monte Carlo simulations – e.g. running models with different multiple parameters looking for the best performance
-ETL – e.g. running a transformation task in parallel
-Image processing and rendering
VPN Gateway
-Connects your on-premises networks to Azure through Site-to-Site VPNs.
-The connectivity is secure and uses the industry-standard protocols Internet Protocol Security (IPsec) and Internet Key Exchange (IKE).
-Point-to-Site VPN lets you connect to your virtual machines on Azure virtual networks from anywhere
Azure Load Balancer
-Even traffic distribution (non-web traffic)
-Supports both inbound and outbound scenarios
-High-availability scenarios
-Both TCP (transmission control protocol) and UDP (user datagram protocol) applications
-Internal and External traffic
-Port Forwarding
-High scale with up to millions of flows
Application Gateway
-Customizable layer 7 load-balancing solution (web traffic)
-Integrated web application firewall
-Redirection
-Support for cookie-based session affinity
-URL Routing
-SSL termination
Azure DNS
Is a scalable and highly reliable Domain Name System (DNS) hosting service provided by Microsoft Azure. It allows you to manage and resolve domain names in Azure as well as for external domains.
-DNS-hosted alongside your apps
-Ultra-high availability
-Fast DNS queries
-Quick updates to DNS records
-Support for all common DNS record types
-Private Zones