Azure Hybrid Cloud Solution for Windows Azure Handbook (5)

Windows Azure Platform Family of articles Catalog

In many cases, we encounter hybrid cloud scenarios where the local private cloud and public cloud are interconnected. For this hybrid cloud scenario, Microsoft Windows Azure will be a good solution.

From the hybrid cloud classification, Microsoft divides the hybrid cloud into the following three types:

1. Hybrid Cloud for Virtualization technology

2. Hybrid cloud at the network layer

(1) Point-to-site VPN

(2) Site-to-site VPN

(3) Express Route

3. Application-tier hybrid cloud

Service Bus Relay on

　　

I. hybrid cloud for virtualization technology

Windows Azure is using a special version of Hyper-V for the underlying. If your on-premises private cloud has adopted Microsoft's Hyper-V virtualization technology, you can easily upload your local hyper-V VHD to the Azure public cloud. If you don't want to continue using the azure public cloud in the future, you can easily copy the VHD from the cloud to your on-premises data center.

The limitations of Windows Azure support for VHDS containing operating systems are as follows:

1. Currently only VHDs are supported and VHDX is not supported
2. supports only fixed-size VHDs
3. VHD size must be less than 127G
4. VHD file is not compressed by another compressed file
5. VHD files are not processed by other third-party tools
6. VHD differencing disk not supported
7. VHD snapshots are not supported

Readers can refer to the author's related documents:

[New Portal] Windows Azure Virtual Machine (11) uses Hyper-V to make VM templates on-premises and uploads to Azure (1)

[New Portal] Windows Azure Virtual Machine (12) uses Hyper-V to make VM templates on-premises and uploads to Azure (2)

[New Portal] Windows Azure Virtual Machine (13) uses Hyper-V to make VM templates on-premises and uploads to Azure (3)

Ii. Hybrid Cloud at the network layer

Azure supports a hybrid cloud approach for three network tiers:

1.Point-to-site VPN

　　Connect a local device (point) to the Cloud Network (Site).

-Point here refers to a host in the enterprise Intranet (VPN client)

-Site here refers to the network of azure Virtual networks

-This enables the interconnection of one host in the intranet with the cloud network, while ensuring the security of the network through a VPN

- Point-to-site VPN is using the SSTP VPN protocol

-Point-to-site VPN is an Internet connection-based

　　Intranet hosts need to install VPN client

The following client operating systems are supported:

-Windows 7 (32-bit and 64-bit)

-Windows Server R2 (only 64-bit supported)

-Windows 8 (32-bit and 64-bit)

-Windows Server 2012 (only 64-bit supported)

　　Interested readers can refer to the author's previous articles:

　　Windows Azure Virtual Network (8) creates an azure Point-to-site point-to-site VPN

2.Site-to-site VPN

　　Connect your local network (site) to the Azure virtual Network (site) in the cloud.

Site-to-site VPN Premise requirements:

-Corporate local network requires a fixed public network IPV4 address

-Requires a Microsoft-certified VPN device or Windows Server. RRAS

For a list of devices, please refer to:https://msdn.microsoft.com/en-us/library/azure/jj156075.aspx

-The VPN device must be in front of the NAT device

- Site-to-site VPN is using IPSec VPN protocol

- Point-to-site VPN is an Internet connection-based

The schema diagram looks like this:

　　

I'll write this article back:)

3.Express Route

Enables the interconnection of on-premises data centers with data centers in the cloud through proprietary network connectivity. Higher reliability, faster speed, shorter latency, and higher security than a normal Internet connection.

I'll write this article back:)

Three. Application-tier hybrid cloud

In some scenarios, implementing Point-to-site and Site-to-site is not very easy. For example, the following scenario:

　　-Enterprise does not have a fixed public network IPV4 address

-Enterprise IT policies that do not allow setting up an azure Site-to-site VPN

In this case, you can use Azure Service Bus Relay on to implement the hybrid cloud of the application tier .

Azure Service Bus Relay on technology:

- do not rely on fixed public network IPV4 or VPN devices

-Can penetrate NAT and firewall devices

-only require on-premises data center to open HTTP 80 port or HTTPS 443 port

Such as:

　　

　　

Azure Service Bus Relay on is a hybrid cloud that implements the application over HTTP, https. If you need to publish the enterprise intranet WCF application services to the public network, by other clients to call the time, only in the enterprise intranet allow HTTP requires 80 port, or HTTPS required 443 port.

In addition, there is no direct call between the WCF Application service on the intranet and the client (extranet) application service. Instead, you first need to register the WCF service in Azure Service bus Relay on, and the client (extranet) app can invoke the registered Azure service bus Relay on. Azure Service Relay on is conceptually similar to a proxy server.

　　

　　Note: Azure Service bus applications currently only support WCF services in the enterprise intranet.

For related documentation, you can refer to the author's blog:Windows Azure Service Bus (6) relay (Relay on) using VS2013 to develop service bus Relay on

　　

Bo-Three Stone Blog (hereinafter referred to as Benbow), at the end of this blog article at the bottom of the right is not noted reproduced, source, provenance of the works (content) are the original, the site for the original content of the copyright reserved, do not arbitrarily reproduced, if the need for a friend can send mail contact me; reproduced original works (content ) must also follow the Creative Commons agreement "attribution-non-commercial use-consistent", be sure to indicate or retain the original source of the article and the information of the blogger (Lei Zhang) in the form of a text link, and be sure to keep in mind that the photograph works on this blog (www.cnblog.com/ Threestone) and other relevant watermark copyright information, otherwise deemed to infringe the original Copyright Act; Benbow declined commercial website reprint. All rights reserved, prohibit illegal and malicious plagiarism which violates the copyright protection Law of the People's Republic of China and related laws and Benbow (legal) statement.

　　

Azure Hybrid Cloud Solution for Windows Azure Handbook (5)