VMware workloads

on Azure
Azure Architects Connect – 18.01.2023

Bernd Loehlein
Microsoft, GBB EMEA Solution Area Specialist adv. Migration
Marc Sauter
VMware, Staff Cloud Solution Architect AVS
Cloud migration strategies
First steps to accelerate migration and mitigate risk

Rehost Modernize Refactor

Redeploy as-is to cloud Attach workloads to Reduce footprint and switch

cloud services to containers
The least risky move to migrate
existing apps. Extend capabilities of your Improve total cost of ownership
existing VMware apps. with economical cloud resources.

IaaS and PaaS Containers

Azure VMware Solution
(Azure Specialized)
Azure VMware Solution overview
Your datacenter Azure Specialized

Azure VMware Solution

VMware Technology Stack VMware Technology Stack

VMware vCenter VMware vCenter

VM VM VM VM VM VM VM VM

ESXi Hosts Express ESXi Hosts

Route
Storage Compute or VPN Storage (vSAN) Compute

VMware-Certified Hardware
 Azure VMware Solution overview
Azure Specialized
Azure Azure
Marketplace
Azure VMware Solution
Azure Portal and AVS
Azure Resource partner
VMware Technology Stack Manager solutions
VMware vCenter Pick and chose your ▪ Network virtual
Azure services appliance
Azure backbone network

▪ Citrix
VM VM VM VM VM
Azure Active ▪ VMware Horizon
Directory
Express ESXi Hosts
Route
Azure
mpute or VPN Storage (vSAN) Compute Monitor

Azure
Security
VMware-Certified Hardware

Azure
Storage
Compute details | Current and planned

Type AV36 AV36P AV52 (Heavy SKU)

(Live in UK South, West Europe)

CPU 2x Intel Xeon Gold 6140 2x Intel Xeon Gold 6240 2x Intel Xeon Platinum 8270
(72 logical cores with HT) (72 logical cores with HT) (104 logical cores with HT)

Clock Speed 2.3 Ghz 2.6 Ghz 2.7 Ghz

Memory 576 GB 768 GB 1.5 TB

Storage – Cache 3.2 TB NVMe 1.5 TB Intel Optane Cache 1.5 TB Intel Optane Cache

Storage 15.2 TB SATA SSD 19.2 TB All NVMe 38.4 TB All NVMe
Azure VMware Solution software and hardware package

Software specifications

ESXi – 7.0 U3c Enterprise Plus

vCenter - 7.0 U3c Standard
vSAN - 7.0 U3c Enterprise
NSX-T – 3.1.2 Advanced
HCX - 4.x Advanced

*Minimum 3 nodes per vSphere cluster

*Maximum 16 nodes per vSphere cluster
*Maximum 96 nodes to an Azure Private Cloud instance
Save with Azure licensing benefits for VMware customers

Get predictable pricing Save with existing licenses Speed your migration

Hourly Pay-As-You-Go Azure Hybrid Benefit Azure Migration and

Modernization Program
• Use PAYG billing • Use Windows Server and SQL (AMMP)
Server on-premises licenses
with Software Assurance to • Discover and assess your
Or save on Azure on-premises applications​ to
Lock in pricing and discounts identify migration candidates.
for 1 or 3 years Free Extended
• Find best practice migration
Security Updates
• Reserved Instances (RIs) guidelines and tools.
for IaaS or AVS • 3 years free security
updates on Azure for • Work with expert migration
• Azure Savings Plan for IaaS Windows Server and SQL partners.
Server 2008, 2008 R2 and 2012
• Skill up your organization
for long-term success​.
Use VMware licenses to save
Avoid potential price on Azure VMware Solution
increases with • VMware Cloud Universal
predictable pricing Credits (VMCU)
• Use AVS Credit Offer, or
• VMware Cloud Universal
Credits (VMCU)
Azure VMware Solution common use cases

Disaster recovery and Speed and simplification of

business continuity migration/hybrid cloud

Cloud bursting TCO opportunities

Datacenter expansion, Application modernization,

reduction, or retirement development, and testing
Azure VMware Solution | On-prem to SDDC

Azure Region

AVS Azure
Network VNET
Azure
Subscription(s)
ER gateway

Dedicated Azure
Microsoft Enterprise Services
Edge (D-MSEE) Microsoft Enterprise
Edge (MSEE)

Customer on-premises
to AVS packet flow Customer datacenter
HCX

Customer edge
ExpressRoute router
Azure VMware Solution | VPN connectivity

Azure Region

AVS Azure
Network VNET

ER VPN
gateway gateway

Dedicated
Microsoft Enterprise
Edge (D-MSEE)

Typical choice for uses like a POC—

not recommended for production Customer datacenter

Customer edge
router
Azure VMware Solution | VMware HCX

Accelerate cloud adoption App

Mobility across vSphere 6.5+ version

on-premises to AVS.

App mobility Hybrid cloud extension

Infrastructure hybridity
Multisite, WAN-optimized, secured, load-
balanced, traffic-engineered network
extension.
Infrastructure abstraction
vSphere 6.5+ AVS
On-premises Transform with bulk migration
Internet /
WAN
Zero downtime on live migrations and scheduled
large-scale warm migrations.
 Life-Cycle
Deployment

Configuration
Physical
Infrastructure
Control boundaries

Physical Security

Azure/AVS
Portal

Hardware
Failures

ESXi Host
Azure VMware Solution:

Host Patching
Microsoft responsibility Matrix

NSX-T

Identity
Management

vCenter

VSAN

Virtual
Machines

Guest OS

Applications
Microsoft Responsibility
Customer Responsibility
 Azure VMware Solution: Global Availability
Canada
Central
Sweden Central

West Europe

North Europe
Canada
East Germany
Central US UK West West Central
West US 2 East US
UK South
North Central US France Central Japan East
West US
East US 2 Switzerland West
West US 3 Japan West

South
Central US East Asia

Southeast Asia

Brazil South
South Africa
North
Australia
East
Available
Australia
Southeast
Planned
Note: planned region availability is subject to change
The most compliance coverage for VMware in the cloud
Global  ISO 27001:2013  ISO 9001:2015  CSA STAR Certification
 ISO 27017:2015  ISO 20000-1:2011  CSA STAR Attestation
 ISO 27018:2014  SOC 1 Type 2  CSA STAR Self-Assessment
 ISO 27701:2019  SOC 2 Type 2  WCAG 2.0 (ISO 40500:2012)
 ISO 22301:2012  SOC 3

US  FedRAMP High  NIST CSF

 EAR  Section 508 VPATs*
Government  DoD DISA SRG Level 4  FIPS 140-2
 DoD DISA SRG Level 2

 PCI DSS Level 1  APRA (Australia)  HIPAA BAA (US)  MPAA (US)
Industry  GLBA (US)  FINMA (Switzerland)  HITECH certification  DPP (UK)
 FFIEC (US)  FSA (Denmark)  HITRUST  FERPA (US)
 SEC 17a-4 (US)  RBI + IRDAI (India)  TISAX
 SEC Regulation SCI  MAS + ABS (Singapore)  TruSight
 CFTC 1.31 (US)  NBB + FSMA (Belgium)  GxP (FDA 21 CFR Part 11)
 SOX (US)  AFM + DNB (Netherlands)  OSPAR
 23 NYCRR 500 (US)  AMF + ACPR (France)  NERC
 OSFI (Canada)  KNF (Poland)  MARS-E (US)
 FCA + PRA (UK)  European Banking Authority (EBA)  NHS IG Toolkit (UK)
 CDSA

Regional  Argentina PDPA  EU – US Privacy Shield  NEN 7510:2011 (Netherlands

 Canada Privacy Laws  GDPR  Spain DPA
 EU EN 301 549  Germany C5
 EU ENISA IAF  Japan My Number Act
 EU Model Clauses  Netherlands BIR 2012
Azure VMware Solution | vSAN Stretched Clusters

Protect against Azure zone failure

Create a single vSAN Cluster that can be

Azure Zone Three
enabled to span two separate availability zones.

Azure Zone One Azure Zone Two

Improve applications reliability
Witness VM
Provide a zero RTO recovery for enterprise
vCenter NSX-T applications without needing to re-architect
or deploy expensive DR solutions.

vSAN
Focus on core requirements, not DR
SDDC with vSAN Stretched Cluster
Get the required highly available infrastructure as
you deploy VMs on the vSAN Stretched Cluster.
Microsoft Azure private cloud data security

Sensitive data protection

Azure Region
By default, customer data is protected
with Encryption at Rest.
Azure Active Azure
Directory Monitor
Customer-managed keys
AVS
private cloud
Organizations can now bring and
vSphere manage their own master encryption
ESXI keys via Azure Key Vault.
vSAN datastore

vSAN datastore
Encryption control
Customer-managed
key vault
Customers now have greater control
over their own encryption.
Azure VMware Solution | Enable public IP to the NSX Edge

Internet
Direct internet access
Azure region

NSX-T Edge Enable inbound and outbound internet access

for AVS to NSX-T Edge—does not interact with
other Azure-native services.
HCX NVA

AVS Azure
Network VNet
DDoS protection
ER gateway
DDoS security protection against network
Load Network traffic in and out of the internet.
VM
Balancer segment

Customer
datacenter
NSX Edge as terminating point
ExpressRoute
Use the NSX Manager to configure network
security and connectivity in and out of the internet.
 Azure VMware Solution – External Storage Options
External storage options enable scaling of the available storage
without expanding the cluster-size. Allows for instant scaling
supporting performance and capacity demands.
VMware Environment

Available storage options include: vSphere vSAN

➢ Azure NetApp Files Datastores
SSD SSD SSD SSD
➢ Guest-OS access to storage services
➢ SMB via Azure Files or Azure NetApp Files vSAN Datastore
➢ NFS via Azure Blob, Azure Files or Azure NetApp Files
➢ Object via Azure Blob Azure Dedicated
Infrastructure

External storage benefits:

✓ Keep node count low to reduce licensing cost
✓ Implement pilot SDDC for disaster recovery to optimize DR cost
✓ Azure NetApp Files capabilities as snapshots, volume clones,
cross-region replication and backup
Flexible disaster recovery options with Azure VMware Solution

Simplifying Providing cloud Advancing cloud disaster

disaster recovery disaster recovery recovery options

From on-premises to AVS From AVS to AVS From AVS to Azure services

Partner
solutions
Site Recovery Manager
Azure VMware Solution
Wrap up

Cloud efficiencies Seamlessly integrate your Predictability in licensing

will outweigh current VMware environment costs as you migrate and
on-prem economics with flexible options. modernize at your pace.
over time.