Professional Documents
Culture Documents
Learn. Connect. Explore
Learn. Connect. Explore
Connect.
Explore.
BRK 3347
Region 2
Availability Zones | intra-region resilience
Edge Carrier
Microsoft
WAN Enterprise, SMB,
mobile
Azure Region ‘B’
ExpressRoute
Regional
Network Internet
Exchanges
Regional Enterprise
Network DC/Corpnet
DC Hardware Services Intra-Region WAN Backbone Edge and ExpressRoute CDN Last Mile
• SmartNIC/FPGA • Virtual Networks • DC Networks • Software WAN • Internet Peering • Acceleration for • E2E monitoring
• SONiC • Load Balancing • Regional Networks • Subsea Cables • ExpressRoute applications and (Network Watcher,
• VPN Services • Optical Modules • Terrestrial Fiber content Network Performance
• Firewall • National Clouds Monitoring)
• DDoS Protection
• DNS & Traffic
Azure inter-DC dark fiber backbone
DCs and network sites not exhaustive Owned capacity Data center
Leased capacity
Svalbard
Future capacity Edge site
Greenland
United States
Sweden
Norway
Canada United
Kingdom
Poland
Ukraine Kazakistan
France Russia
Turkey
United States
Iran China
Algeria Pacific Ocean
Atlanta Ocean Saudi
Libya Egypt
Mexico Arabia India Myanmar
(Burma)
Niger
Mali Sudan
Chad
Pacific Ocean Nigeria
Venezuela Ethiopia
Colombia Dr Congo
Indonesia
Peru
Angola Indian Ocean
Brazil Zambia
Bolivia
Nambia
Australia
South
Africa
Argentina
RNG regional architecture
Region
Contiguous geographical area up to roughly
100km in diameter (2.0ms RTT)
Microsoft
Regional network gateway backbone
Massively parallel, hyper scale
DC interconnect
Space and power protected
RNG RNG
Data centers
Small, Medium, or Large (T-shirt sizes)
Only contains server racks, DC network DC DC DC DC
RNGs are sized to support growing the region
by adding data centers DC DC
DC Region
Azure Network Emulator
Azure
What it is
Containerized router VMs linked via VXLAN tunnels to create
a faithful replica of production network
“Bug compatible” emulation of production network gives
S1 S2
network engineers realistic test environment
Virtual links
Status VM A Orchestrator
Used daily to de-risk major network operations
SONiC
L1 L2
T1 T2 T3 T4
Over 12 million core-hours spent on
emulation in last six months
VM B VM C
Numerous bugs caught before hitting
production network
Inside Azure
Logical Networking
Hyperscale SDN | Building the right abstractions
Control plane
Switch (Host)
Data plane
Azure architecture
RBAC
Service Fabric AKS Web Apps … PaaS offering
Hardware Manager
Azure Infrastructure
Azure SDN architecture
Azure SDN Azure Resource Manager
The basis of all NW virtualization
Application
Application
Application
Containers
Containers
Containers
in our datacenters
Network RP Compute RP
VNet
Regional Network Compute
The logical network for all workloads Manager Controller CA CA CA
regardless of chosen service model or
application container Network State
Manager
Connection
App Service Plan pooling App Service Plan
Data Replication
Azure Virtual WAN | Problem statement
Users circumvent IT
controls and access 2
apps directly
VPN WAN
Remote
Remote Workers Headquarters Operations
Azure Virtual WAN | General Availability
…
DNC CNI/CNS
Multiple orchestrators Master Node VM Worker Node VM
Container n
RAM
Cores
1
1 2
1 1 11
1 12
2
3
4 234 2
3
4 32 3 2
RAM
Cores
4 4 4 3 3 2
RAM
Cores
2 0.00000000533
1
Beasts
4 4 4 3 3 2 1
Gen 2 Gen 3 Gen 4 Godzilla Gen 5 Gen 6 Beast Beast v2 Azure Sphere
2 x Skylake 24 Core
Processor 2 x 6 Core 2.1 GHz Processor 2 x 8 Core 2.1 GHz Processor 2 x 12 Core 2.4 GHz Processor 2 x 16 Core 2.0 GHz Processor 2 x 20 Core 2.3 GHz Processor Processor 4 x 18 Core 2.5 GHz Processor 8 x 28 Core 2.5 GHz Processor 1 x A7 Core @ 500 MHz
2.7GHz
Memory 768GiB DDR4 Memory 4096 GiB Memory 12 TiB
Memory 32 GiB Memory 128 GiB Memory 192 GiB Memory 512 GiB Memory 256 GiB Memory 4 MiB
Hard Drive None Hard Drive None Hard Drive None
Hard Drive 4 x 2 TB Hard Drive None Hard Drive None
Hard Drive 6 x 500 GB Hard Drive 1 x 4 TB 4 x 960 GB M.2 SSDs Hard Drive BYO
SSD 4 x 2 TB NVMe, 1 x 4 x 2 TB NVMe, 1 x
6 x 960 GB PCIe Flash and 1 x 960 GB SATA SSD SSD
SSD None SSD 5 x 480 GB SSD 4 x 480 GB SSD 9 x 800 GB SSD 960 GB SATA 960 GB SATA SSD BYO
and 1 x 960 GB SATA NIC 40 Gb/s
NIC 1 Gb/s NIC 10 Gb/s NIC 40 Gb/s NIC 40 Gb/s NIC 40 Gb/s + FPGA FPGA Yes NIC 40 Gb/s NIC 50 Gb/s WiFi 2.4/5.0 GHz 802.11 b/g/n
Demo
Beast v2
Azure servers | Special purpose
RAM
Cores
1
1
1
1 1 1
1
Completion
Interrupt
vRegisters
Admin CQ
Admin SQ
Virtual
Virtual
Virtualized NVMe Direct Access to NVMe
Physical Admin
from the VM Filter
CQ
SQ
Poll for
Completion
Registers
Physical NVMe Controller
Demo
Lv2 NVMeDirect
Inside Azure Compute
Azure architecture Workloads
Web services, IoT, ML,
Microservices,
Serverless…
Azure Portal CLI 3rd party
Telemetry & Insights
Authentication
Azure Resource Manager
Hardware Manager
Azure Infrastructure
Azure compute architecture
Global ARM (Azure Resource Manager)
NRP is
pass-through
Ntwk
AllocateNtwkResources programming SLBHP is
configured
Send goal Send goal Send goal with SLB
state state state NMAgent pulls from CDS endpoint
Windows access
infrastructure
SAC access, which allows for CMD and PowerShell prompts
NMI calls Host
VM1 VM2
Demo
Serial Console
Virtual Kubelet on AKS
Supports Linux and Windows containers Virtual kubelet registers itself as a “node” and allows developers to
deploy pods and containers with their own APIs
Takes advantage of both the capability of
Kubernetes and the management value Capacity NewConditions
Cluster
Rich Microservice lifecycle management
Support for stateful microservices
Built-in state management via Reliable
Collections and Actors
In production
Core Azure RPs
Cortana
Cosmos DB
Skype for Business
Service Bus
Event Hubs
Event Grid
Power BI
Azure DB SF Application
Intune
…
Service Fabric Mesh
Control Plane
service 1 service 2
service 2
Micro-billing by seconds Inventory Manager
App1 in isolated network
Containerized
Cluster Allocator
Windows and Linux
Stateful Service Fabric apps
ARM
Deploy SF and K8s applications
to edge clusters App model
Edge Other
IoT hub Backend
apps services
Supports stateful services
Sensor/control
Service Other
IoT Hub Fabric Mesh Services Compute plane
Edge Cloud
Demo
IoT Edge high availability
Cloud data threats
Protected container
App App
Isolated portion of processor & memory
Code & data cannot be viewed or modified from outside
Supports attestation: proving of identity Operating System Code
Supports sealing: persisting secrets
Data
Examples Hypervisor
Intel SGX
Virtualization Based Security (VBS) aka Virtual Secure Mode Hardware
Azure Confidential Computing
Encrypted
query
Confidential Computing Vision
Trusted SQL
SQL Server
Data is fully in control of the customer Module Client
Azure has no access to customer data Encrypted
Code accessing customer data is authorized by the customer results
LB LB
Front-Ends Front-Ends
FE BE Disk
Block Blob write throughput of 50 Gbps
Up from 60 Mbs
Blob A
Instantaneous write throughput
No ramp up
Average Latency
Object-level tiering to Hot is on the roadmap
Hot
(10-20ms)
Premium
(4-8ms)
Standard SSD
Separation of compute,
Sqlservr.exe Sqlservr.exe Sqlservr.exe Sqlservr.exe
Log
storage, and log shipping Compute
Landing Zone
(Azure Premium Storage) Log
Service
Data Pathway
Azure Storage
Demo
SQL DB Flex Scale
Azure Cosmos DB | Multi-master at global scale
K V
K V
K V
Writes Reads
High write & read availability Tables Collections Graphs
99.999 SLA worldwide followers
leader
forwarder
Low write and read latency
Container Replica set
<10 ms at the 99th percentile To remote
Container
Containers
Resource resource
partition(s)
partition
Global distribution
Designed to support hundreds of … …
Partition-set
Local distribution
Demo
CosmosDB MultiMaster
Azure
Hardware and software innovation at scale
Please evaluate this session
Your feedback is important to us!
The s
lid e will Th
be re is slide is
place r
d ons equired.
ite th D
rough o NOT d
Silver elet
Fox P e or alter
roduc th
tions e slide.
with
an up
dated
QR code.
From your phone download and use the Ignite Mobile App
by scanning the QR code above or visiting
https://aka.ms/ignite.mobileapp
© Copyright Microsoft Corporation. All rights reserved.