Time
7 hours 46 minutes
Difficulty
Intermediate
CEU/CPE
8

Video Transcription

00:00
Hello and welcome back to Cyber Aires. Microsoft Azure Administrator A Z 103 course I'm Will Carlson. And this is Episode 31 about virtual machine availability zones and availability sets.
00:12
In today's episode, we're gonna talk about the concept of an availability zone and what it's designed to guard against. We're going to deploy a virtual machine to an availability zone,
00:21
and then we're gonna move on to discussing the concept of an availability set what it is, what it was designed to guard against. And we're also gonna configure of'em in an availability set.
00:32
But first of all, I want to talk about some of the downtime items that may impact your azure environment, particularly the top three here that are things that Microsoft is planning and mitigating against with a number of solutions.
00:44
The 1st 1 is gonna be a planned maintenance event and those air gonna be events that happened because Microsoft is maintaining the hyper visor and all of the underlying infrastructure that makes the azure environment run.
00:55
Most of these updates are not going to impact your azure environment whatsoever.
01:00
Then we move on to unplanned hardware maintenance, and these were gonna be maintenance events that are triggered by the azure fabric when it senses that something in the environment is likely to fail or is about to fail.
01:12
When this happens, Microsoft is goingto live. Migrate your virtual machine workloads off of the failing hardware and on toe healthy hardware.
01:22
However, depending on the workload, you may notice this migration. The migration process could pause your virtual machine workload for a short period of time and shortly before and shortly after the migration, there may be a bit of service degradation,
01:37
the last event here that Microsoft is trying to guard against. There's going to be unexpected downtime, and these can include any local failures, either within the network of the data center that your workloads are housed in, or even within the Cabinet that you're workloads are housed in as well.
01:53
When there is unexpected downtime, the same live migration and the azure fabric kicks in, and it attempts to move your workload onto healthy
02:01
hardware. However, this most often will require a reboot and in some cases, a loss of the temporary disks that we discussed previously
02:10
in the last downtime event that your azure environment is likely to experience is actually all a whole host of other downtime events that could happen because of your infrastructure because of the operating system, because of the application that you're running, any of the normal downtime events that we have in our administrative life are gonna fall into this fourth category here.
02:31
So the real question is, is what is Microsoft doing? And how can we architect our systems here in Azure to help avoid these problems? And the first way we can do this is through the concept of an availability zone.
02:43
Now we've talked about azure regions already. An azure region is just a geographic area. Let's use South Central as an example or central us is another example. And within this region or rather within some regions,
02:59
Microsoft has multiple data center facilities that are relatively close to each other and connected by
03:06
high band with low latent seat network connections. And each of these availability zones as a separate data center has redundant power cooling and networking.
03:17
What this solves to do when you have workloads across multiple availability zones? Is it guards against a zonal failure or a single data center failing? So your data is still in one region, but it's across multiple data centers. So if there's a data center level failure,
03:36
your workload still continue to run.
03:39
The next concept here, under high availability for Azure, is going to be that of availability sets. Now, availability sets are a little different than availability zones. Availability zones exist to protect you against a data center. Wide failure
03:53
availability sets exists to protect you against a server rack level failure. And there could be a couple of failures that occur at the server rack level. And the first of those is gonna be a fault Domain and a fault domain is simply a set of equipment that's ultimately impacted by
04:13
one single piece of other equipment or another group of other equipment. And think about this again
04:18
as our entire server rack of the server rack is gonna have redundant switching. But ultimately at that switching fails. The entire rack is gonna be impacted by that. If the power fails for an entire rack again, the entire rack of equipment is going to be impacted by that, so that would make up a single fault domain.
04:38
An update domain is going to be a logical construct here within the azure fabric that allows Microsoft to safely reboot and update a single update domain and know that they're not going to impact a completely separate update Domains
04:54
and again to clarify a fault domain and updated remain are part of an availability set, and an availability set is designed to guard against an equipment level or a rack cabinet level failure, whereas an availability zone is meant to protect us against a data center level failure.
05:15
Now that we have those fundamentals under our belt, we're gonna go ahead and step into portal and begin deploying some virtual machine workloads in availability zones and availability sets.
05:26
We're gonna come in here to virtual machines were gonna click on add to add a new virtual machine. And for the most part, we're gonna leave all of this a default settings. We do have to create a resource group or select one. I'm gonna go ahead and create a new one.
05:39
It's like, OK, name the virtual machine
05:46
and we're gonna leave this in the south central region to illustrate the fact that availability zones are not available in all regions. And that's gonna be because Microsoft does not have three data centers available to them in every region. So
06:00
availability zones are gonna be dependent upon the region that you select. So if I change this from us South Central to U. S Central,
06:08
I now have the ability to deploy this virtual machine into an availability zone.
06:13
And we can see here that I get to choose which availability zone I'm deploying this virtual machine into. There are three availabilities own options. The one that you choose isn't necessarily important. So we're gonna go ahead and select availability Zone one
06:27
gonna make this a Windows workload to simplify the password solution down here and into my credentials.
06:33
I'm gonna go ahead and leave. Everything else is default, and we're gonna review and create this virtual machine in an availability zone.
06:42
Now that our deployment is complete, we're gonna go ahead and click on go to resource and see that this virtual machine looks very much like any of the other virtual machines that we've deployed so far.
06:51
And in large point of fact, it is just like any other virtual machine, except that exists and is set up in an availability zone, not keep in mind that simply deploying one virtual machine in tow. One availability zone does nothing for us if the availability zone this virtual machine is running in
07:10
availability Zone one in central us.
07:13
If it goes down,
07:15
we lose the access to this virtual machine.
07:17
So the solution here, ultimately, when deploying virtual machines into availability zones, is to deploy two identical virtual machines into two different availability zones.
07:30
Then we come into the question of how we manage traffic to each of these virtual machines. And that's gonna be through the use of something called a load balancer, which you may have experienced in your professional career so far. And Azure has an equivalent with a few different flavors that you can use as well.
07:46
So you would put two virtual machines in two different availability zones,
07:50
and you would put them behind a load balancer, and the load balancer would handle passing the traffic to the virtual machine that was online and avoiding the one that may be off line.
08:01
This is another great pointer or benefit to arm templates. If you have regular workloads that you need to deploy into availability zones fronted with a load balancer, you could set up an armed template that does that and simply point and click fell out the parameters and the arm template would deploy. All of the resource is
08:18
instead of you, is the administrator having to go in and separately, set up each virtual machine
08:24
and the load balancer itself.
08:26
We're gonna move on now to the concept of an availability set and again, availability sets exist to protect us from Cabinet level failures within a data center, whereas this availability zone set up exists to protect us from data center wide failures.
08:41
And in order to do this, we're gonna go ahead and come up here to create a new resource,
08:46
and we're gonna search for availability.
08:48
We're gonna click on availability set,
08:50
but the first thing we're gonna do is actually create the container, as it were of the availability set.
08:58
We're gonna leave this in the free trial. We're gonna go ahead and create a new resource group,
09:05
and I want to call your attention to this location here. So the location of an availability set is important because you're gonna have to deploy the virtual machine work loads into the same region as the availability set If you want to take advantage of the availability set,
09:22
we're gonna go ahead and leave this at U S central
09:24
and you can see here that we can change the number of fault and update domains again. A fault domain exists to protect us against, ah, hardware level failure in the cabinet and then update domain is a logical way for azure to keep up with what's being updated to ensure that it doesn't affect multiple things in multiple update domains.
09:43
Tool tips here are really quite helpful. These air actually ceasing to believe it or not,
09:48
I highly recommend if you see the tool tips hover over him, see what they're all about.
09:52
Use managed disks is an option here. For the most part, it's recommended to use manage discs for your virtual machines. So you can simply leave this at Yes, that's gonna enable Azure to be a little more intelligent about how it manages fault and update domains all the way down through to the storage.
10:09
Now we're gonna create this availability set, and now that that deployment is done, we can come in and deploy a virtual machine into that availability set.
10:16
This is very much similar to the availability zone process. We're gonna come in.
10:22
Same thing we did before
10:24
we're gonna name is virtual Machine. Pick the region. Now you'll see here if we sick select availability said
10:31
I have nothing here. I don't have any availability sets and the South Central US region. Now, thankfully, I could go ahead and create one from here. Or I can come down and change this to us Central, where we created the availability, said already select that
10:46
and then review and create this virtual machine.
10:48
Now, availability sets are going to be dependent upon the same thing that an availability zone is as soon as I have two identical virtual machines running identical workloads. I need to be able to effectively route traffic to the healthy virtual machine. And that's gonna be done with a load balancer.
11:09
We're gonna talk quite a bit more about load balancers in the networking section.
11:11
Just keep in mind that this is how you do the virtual machine. Part of availability sets and availability zones will handle the load balancing network piece in an upcoming episode.
11:22
So in this episode, we called out the concept of what an availability zone is that essentially, it's multiple data center facilities that are segregated and discreet but interconnected within an azure region, and it helps guard against data center level failures.
11:37
We also talked about availability sets and how they help protect us against Cabinet level failures, both for updates and also for hardware level failures. And we step to the process of configuring or adding a virtual machine to both an availability set and availability zone.
11:54
Keep in mind if all you deploy is one virtual machine tow Either of these options. You have not increased your redundancy and resiliency whatsoever.
12:03
You have to have two virtual machines in each of these products when you do so. Microsoft has relatively high levels of SL requirements, for example to virtual machines, and an availability zone gives you four nines up time s L A.
12:18
Coming up next availability sets really are great. But if we want even more automation to this type of high availability and scalability, we have another option in a virtual machine scale set. Thanks for joining me. I'll see you in the next video

Up Next

AZ-103 Microsoft Azure Administrator

This is a training course for the Microsoft Azure AZ-103 Certification. The Microsoft Azure Administrator training course teaches students to perform tasks like managing Azure subscriptions and resources, implementing and managing storage, deploying and managing virtual machines (VM) and networks, and managing identities!

Instructed By

Instructor Profile Image
Will Carlson
Director of IT and Cybersecurity
Senior Instructor