Hey there, this is Seth Juarez from Channel 9,
coming to you from the beautiful Channel 9 Studios.
I have a special guest today, Ryan.
How are you doing my friend?
>> Very good. How are you, Seth?
>> Good, so what do you work on?
>> I work on networking, Azure networking.
I'm a part manager over there, and I own virtual networking and
load balancing as a service.
>> I mean, that's exciting stuff when it works, right?
>> Yeah. >> But then it's not so
exciting when it doesn't work.
Tell me, like for
those that are like IT pros- >> Yeah.
>> And they used to setting up networks and controlling--
>> Right.
>> Stuff. >> Yeah.
>> There is a fear that you're going to
lose control when you're in the cloud.
>> No. >> Is that the case with us?
>> That is not the case, and
that's what we're trying to solve, right?
So, they get the exact same control and the abilities of
an on prem network, through virtual networks in Azure.
>> I see. >> Virtual networks
are your virtual private cloud,
virtual private environment that you have for your company.
>> I see. >> So, but it's done,
the magic is it's all done through the click of a button.
We just come from the API servers and say our network, and
then you get to specify a few things,
like IP address space, policies, and subnet.
Further, then give it to us.
Then we take it that network for you.
>> You could do whatever you want.
>> Whatever you want, and then once you have this network
that gives you a boundary, your trust boundary, and
then you deploys services or virtual machines.
Its students account, you link all of that, that becomes your
virtual private environment in the cloud.
>> That sounds awesome, but
as an IT pro is watching this she's taken.
>> Yeah, but when things go wrong how do I even begin to
understand those things?
You are going to talk about a couple of tools that help out
with both, if you're an IT pro and
a software dev, to use these networking features.
>> Exactly, exactly.
So, one of the tools that I really want to demo today was
something called Network Watcher.
>> Okay. >> We are very excited about
this recently.
This is almost like a proxy if you think of it, right?
It's sitting there, it's watching your network,
it's watching what you're doing and all that.
But networking standpoint, when you wanna dig deep,
it gives you all these abilities to go deeper and then do some
analysis on your network packet captures and whatnot, right?
>> Okay. >> So, I really wanna demo this
network watchers.
One of the basic abilities of network watcher And
they're just able to take packet captures.
If something goes wrong like we're mentioning,
as an IT pro or as a network admin or even a developer
who's doing diagnostics, the first thing we think is,
who was talking to who and what was he sending?
I need to see the packets to determine the worst
could be wrong over here,
and we make the ability to take the packet captures so easy.
And you come to the portal.
>> All right, so let's see, let's see.
>> Let's see it.
So, once you go to Azure Portal, this,
Network Watcher is now a service, you can pin it, and
that's what I did so it's actually right over here.
>> So, Network Watcher is a- >> Is a service on its own.
>> So, how do I get to it from the beginning?
>> You can go to More services, for example, right, and
then go search for it.
>> Network watcher.
>> Got it, okay. >> There you go, right?
I have pinned it and now I am going to favorite it so
it is just in my pane over here so I can just click that and
it will then give me enable in regions.
We are enabled there, so
I've enabled this in the three regions for myself.
You can go enable this in any other region
that you have deployments on.
>> I see. And so you might have multiple
things working in a region.
Network Watcher will be able to look at any of them.
>> Exactly. >> Okay, cool.
>> It's a regional service.
I can go enable Network Watcher for region.
Guideline.
[CROSSTALK] >> So
I'll just give you brief overview what all this does.
It gives you an effort topology.
>> Okay >> View
whatever that work you have it gives you topology of that.
You got to set up a virtual network to see
the topology for it.
And then it also gives you,
let me just go back to the screen over here
It also gives you information about the next top and all that.
But today what I really want to demo is the packet capture.
>> Okay so before we get to the packet capture.
>> Yeah. >> There's just tons of things
you can learn about your network just off the bat.
>> Exactly, exactly.
To summarize it's like the topology for that one.
>> Got it. >> It gives you the next half.
There's a A packet,
that you know you're sending it over here.
Where does it go next?
It gives you that information, it gives you more log, and
other things like that, right?
But packet captures is what I want to
demo today >> Let's do it.
>> This ability.
So what do you do, you come to Packet Captures.
And you can add a configuration, a new packet capture or
a new virtual machine.
And it's asking for a subscription resource group.
And here is where you just select your virtual machine.
So I've selected my virtual machine in this particular
resource group.
I'm saying just start taking packet captures, and when you
take them, store it either on a storage account or to a file.
>> That's smart.
>> Do wherever you want. Right?
It's a storage account.
And you can do original filters like one of these TCP packets
and on certain ports.
>> That's awesome.
Because I can only
imagine if you're dumping this into a storage port,
then you can read something else like.
Like the BI stuff that we have,
for example, tons of learning off of that, too.
>> Exactly, you can just download that, dump the files.
That's what I'm gonna show you.
So once- >> I was looking for Power BI,
>> Power BIs do, definitely.
But I'm just gonna show you once you do something like this,
I'm just gonna show you a sample I already taken, right?
>> Okay.
>> And then once you go into that,
>> What it has done for you is,
if you look at the details, it puts back a PCAP file.
People who have done any sort of, one second, the details.
>> If you go to status, looks like there it is.
>> There it is.
Okay, so
the PCAP file is the [CROSSTALK] >> Once you have wire start in
your machine >> In this way,
just see it right here.
Do a download, right.
This is downloading for you right here.
And bring it up.
Wide shot, right.
Beautiful.
>> This is like the exact same thing that I used to do when I
was on my own network.
>> Yep, exactly.
>> Okay. >> You could do this
exact same thing on your laptop, your desktop.
But now you're doing it on the remote works for the machine.
That is running in the cloud somewhere,
it is your network by just click of a button.
>> That's awesome.
>> We made that easy.
>> So that's the pack Network Watcher that does this.
>> Yes.
>> And it looks like the Network Watcher has tons of other
features, but
this is just to show you how fine grain we can go.
>> Exactly, there's a sample of what it can do.
>> Okay. >> It can do with adding a
>> More stuff to this
in the future to just make this diagnosability
experience much easier and better for developers.
>> The other thing that I used to do as a dev or
slash half IT pro is I would configure firewalls
>> For applications.
To make sure that only certain packets are going in and out.
Is that something you can also do?
I'm gonna do that as well.
But before that, let me tell you, so
security is different layers and levels, right?
We need thinking about doing a web application on the cloud.
You gotta definite think about security,
but from different angles.
Number one, we give you some infrastructure protection.
Right, since running it Azure gives some benefits.
This is free for you, you're gonna have enabled app.
For example, VDOS protection.
If somebody's trying to attack your web application by sending
all of, like this to it, DOS, right?
We will take care of it automatically.
>> So there's nothing you have to do.
>> Nothing you have to do, right, comes for free, right?
>> Then the second level.
Let's assume some packets made it in then you can do network
level protection saying IP address level blocks. Okay.
I don't, this
is like in a bad IPs, they like black listed.
I want to not allow them.
Or I just don't want to allow from this region.
That's security groups that's also free.
It's platform figure it out. Right?
>> Sure.
>> Now what I'm going to show you here is a web
application firewall.
This is there giving you tools even more so
that are specific to your application.
That it can do some security for applications.
There's three levels d-dos infrastructure the network
This is application level network security.
And so the one at the bottom, we're for free.
>> For free.
>> The one the middle with network ACLs is something you
can set up, for your own virtual network.
>> It's also free, but yeah.
>> And then the last one is, if you
have a particular application >> Exactly.
>> Okay, so let's take a look.
>> Now is that applications, right?
So here we have and again from Portal, You can go to that,
and again, for more services, look for application gateway,
you search it, and I'm just gonna switch subscriptions over
here, where I have some samples I can show you.
I just created a for demo purposes, right?
I'll show you what it is, right?
You go clear, and new instance.
This is applicable but right?
Say new, and then it just configures some of it.
So once you configure it, How soon you can get this.
Is it internal facing or external facing?
If we're really hosting a web application do you want
a note to showcase the Internet,
you want a front facing app for that.
So you get that, right?
So this becomes your front facing IP address.
So people who want to get to your [CROSSTALK]
>> Applications comes through
that, right?
This has DNS name and all that, and
you can put a vanity name after it.
You can do all that, but once get to applications,
you get to that, so.
>> Now, and I, what does it give you?
>> It gives you liberties like you can create a standard or
a Standard doesn't come with a.
This application gateway comes with a as a separate skew.
You can set it to size, right.
So we create that many apps for you.
And then in instance count you can just change it
[CROSSTALK] >> So
this become the entry point for your application now?
>> Exactly. >> Got it. Okay.
>> This is the entry
point, right.
And what does it do?
So once you enable this protection,
we give you the standards like OWASP 3.0, so
we do all the protection for you over there.
>> Nice.
>> You can even customize that by doing Advanced rule
configuration.
If you want, you can customize some of these rules to behave
in a different certain fashion.
But by default, we protect you from all the standard stuff
That's amazing, one of the OAuth's top 10 is SQL injection,
how does this help with that?
>> That's what I'm gonna demo, actually.
>> Nice, we didn't even plan that folks, SQL injection's
probably the worst offenses that anyone ever does.
>> Right, so that's just your frontend configuration,
now what it prevents you from, but
where is your application's really coming?
That's a backend pool,
here is where you have your applications running, so
this could be a real app that is doing the business logic.
>> Okay. >> That becomes your backend
now, because your frontend, like you said, becomes the wharf,
all the rec must go through the wharf, right?
And you have listeners, so listeners is another good,
cool concept, so let me just tell you about that,
since you got this wharf and you're paying for it.
It's not like you can only host one website behind it, you can
host multiple, and this becomes the entry point for all of them.
>> Is it load-balancing it, as well?
>> No, you can just do a listener, you get to 8480,
the wharf will get the req list, and based on the URL,
it will forward into the respective packet.
It does a little bit of load balancing, yes, but
we kind of think of more of a traffic distribution.
>> I see.
This reclist is for this website, so,
based on the content,
based on the URL, it forwards into that particular website.
>> It's like your router that has a firewall,
then it'll take you to the right thing, and
then you might have a huge application over there,
you could do load balancing and stuff over there.
>> You can do that as well, yeah, but this is where
we'll learn the basic checking of firewall stuff, it checks
the firewall, so if it looks good, enter into this particular
application, so you can on board multiple websites behind it.
>> Awesome.
Okay, now let's go to the demo, I'm just going back to this
particular URL, this particular IP address, and
I just have a very simple application here.
>> Yeah, yeah, [CROSSTALK], right?
>> Looks like it.
>> This is your comment wall,
you do give whatever comments, right?
>> And that's the IP address of the wharf
that we started from, okay.
>> Exactly, I saved it as the log so, it's a safety,
all right, it says, hi.
>> I always say, hi.
>> You always say hi?
>> That's a fairly standard comment, we can allow that,
there's nothing wrong with it, but
if there is a hacker who wants to really attack this website.
>> Single tick or 1 = 1, right.
>> So he doesn't script.
>> Shoot, that's even worse.
>> Let's create over here, x + y = z, something's not right,
he wants to take you down, right, and then he does
something out on the comment and then he submit on that.
Look at that, it recognized that input,
it's a SQL across injections stuff.
>> Yeah, this is like XSS stuff,
it's like cross-eyed scripting error.
>> Yes. >> You're going to see the same
kind of thing with SQL injection, as well, right?
>> Yep. >> Okay, that's awesome,
what it does is, it just says, you can't do that.
>> Yes, you don't get to do that.
>> Nice. >> It's doesn't
even show you the page after that.
>> Is there a way to make the wharf say,
hey, you're being evil?
>> Actually, you get all the logs over here.
>> I see.
>> So this is the activity, then the activity logs,
when we enable that, we start to see all those things over here
with the timestamp, this guy tried to do this and
this guy tried that, everything is actually over here.
>> That's amazing.
>> [CROSSTALK] You've got to enable that, but
you see all of it over here, right, but that's basically it,
very quickly, you can set up a wharf for your web applications.
>> And if you're worried about security,
particularly with the OS top 10, you just set this up,
that becomes now the public part of your application that you
have in the back, and then it'll just route all the traffic.
Awesome, so the last thing we're talking about, is there is this
really nascent I don't know if it's nascent anymore, but
there is this notion of containers.
>> Yeah. >> And I've always wondered
about container networking,
because if you have a million containers, you have to have
an infrastructure to do that, how do we handle that?
>> Perfect, so containers, like in Azure, we've made it
very simple now, yo know about Azure's container services?
>> Of course.
>> Actually, ACS is a great integrator of
open source technology as well, right?
So we give you orchestrators to manage the containers through
which you can launch them, update them, delete them,
whatever.
But with respect to networking, why do we need networking?
Like you said, okay I have a big cluster,
I have hundreds of containers running now and one has
after the other, and these containers are not some island,
they are part of my network too, right?
>> [LAUGH] Yeah, of course.
>> Cuz they have to talk to the rest of the stuff I have
on the network.
>> Via IP addresses.
>> Exactly, maybe virtual machines or
some other application I'm running in the VM form,
it's gotta talk to that, and you even haven't talked to my
on-premises, right, it's gotta be in my network.
But with basic stuff that you get with ACS,
we don't give you networking from Azure,
so, whatever the orchestrator gives you is what you have.
>> I see. >> So generally,
it's overlay networking or NAT based and what not, but now
recently what we have launched is an Azure VNet for containers,
I talked about VNet's right, so how do you even configure that?
As you know you could do ACS from portals, so
let's take a minute to show you have ACS from here, right,
you can go create an ACS cluster from portal.
>> Got it.
>> But they also have something called ACS engine here which is
open source also, which is basically a PowerShell based
thing, so which takes a JSON file as input of ACS engine.
So here, is network policy, generally you can leave this
empty, you get the default what the orchestrator gives you.
If you think Kubernetes, it's Kubernetes,
then if it is in DCOS it's DCOS but here,
we have added this option to say Azure now.
So Azure networking is given to you for the network plugin for
your content and orchestration.
>> I see, so instead of having Kubernetes or DTOS
manage all the IP addressing, you can make Azure do it?
>> Exactly. >> Got it, okay.
>> And when you make Azure do it,
then the IPs that they're getting for
the containers are from your virtual network.
>> Which is awesome because then, all of your profiles,
your ACLs, everything that you've already spent time and
effort setting up in your Virtual Private Network,
will now also correspond to your containers.
>> Right.
Plus this is one policy, right, so you have set up your network
with some policies, you have some security groups,
security rules, everything applies.
And if you have some connectivity that is already
defined for you everything just works, so here I created
a cluster like that using Azure as the networking policies,
right.
>> Okay.
>> And this is what I get, once I deploy the ACS cluster,
I get all of these things, and if you look at my virtual
machines over here just real quick.
I have a Kubernetes master and Kubernetes notes.
Those are the things in the nodes where all the containers
are to be spun out of?
>> Exactly, the agents is where all the containers are actually
spun out, right, and I created also, Windows VM,
just to have other applications as part of the network.
And here my Vnet itself is actually from the address based
10/8 after a virtual network address space,
it would define them.
Now, it is the thing, so I'm going into the machine,
the Windows VM, which I've created, and
I'm connected into the cluster right now.
So right now this queue control, so
I can get to the cluster itself, this in the cluster, so
I'm going to say UCTL, >> So as you're typing this,
just for people to be aware of what's happening,
you had in that subnet, or in that virtual network,
you had the Kubernetes master, the two nodes,
with some storage accounts and you put a Windows VM in there,
and that's literally in that network right now?
>> Yes. >> Okay.
>> I went right into the Windows VM, and from that VM,
I'm connecting to the Kubernetes cluster.
>> Perfect, awesome.
>> Right. >> I'm asking the Kubernetes
cluster, what pods you have?
So you have all the data files over here,
right, these are all, each one is each individual container,
I'm going to go into one of them right now.
>> Wow.
>> So I'm going to go into the first one, then the next one and
once I'm inside, I'm going to look at what IP it has.
>> It has a 10.240.0.47, if you remember,
my virtual network IP address was 10/8, this IP's from that,
so this container literally is in the virtual network.
>> That's awesome because now what's happening is instead
of Kubernetes doing whatever it is that it does, which I'm sure
is great, but if you've already done a lot of work in your Azure
networking, you can use that.
>> Exactly. >> Okay, awesome.
>> You put this network right into the VNet and now,
this container can ping literally, any other containers,
and just to prove a point, it'll only take 30 seconds.
So, I'm gonna say kubectl get describe pods,
just to get another IP address of one of the other containers,
and so see it 10.240.0.110, it is another container.
So I'm gonna go in over here, so
let's go into one of these containers right now.
>> All right.
>> Yeah, and let's ping,
10.240.0.110.
>> You got a 1 in there.
>> All right.
>> Nice.
>> I can pretty much hit any container or
anything in the network right now.
>> And so you effectively, from the Windows box, went into one
of the containers, and pinged a different container.
>> Yes.
>> And the cool thing is that now that now
that you're in your virtual private network,
it's all in this safety zone of your private network.
If you put this in front of a wharf for example,
then everything is behind there, it's totally protected.
>> Exactly, exactly.
>> That's amazing.
>> The containers can be behind a wharf so
you can run your web application through a container.
>> That's awesome. >> The wharfs could still be
protecting you or the container can talk back to
something on-premises, it's pretty much in your network.
>> Sure. >> It's not somewhere else, and
you get all the benefits of the policy you have set already, and
they can use the resources that they already have the network.
That's the power of taking the infrastructure network and
giving it to your container cluster.
>> That's wonderful. >> That's what we have done,
it's called Azure VNet for in preview right now, but
it's good to use, and we have instructions there.
>> Awesome, so we've looked at Network Watcher,
we've looked at WebApp Firewall, and we've looked at container
networks, where can people go to find out more,
is there a blog or something, or a website?
>> Yeah, Yusuf blog, he has a series of seven blogs,
it has all the URLs that leads to these things.
>> Fantastic.
>> Plus in the Azure Docs,
networking docs, we have links to all of these, and there's ton
of ton of samples that you actually get out of it so.
>> Well, make sure to put the links below so you can see them,
thanks so much for spending some time with us.
It's been awesome learning about virtual networks and
what they can do for us, if we're IT pros, or
software developers as well, thanks so much for watching.
My name is Seth Juarez, this is Channel 9 and
we'll see you next time, take care.
>> Thank you.
For more infomation >> Resultados Loteria Nacional de Panama En Vivo Viernes 26 Mayo 2017 Que Jugó Gordito del Zodiaco Mayo - Duration: 1:18. 
For more infomation >> Cờ tướng Lên tốt, pháo sau tốt đánh xuống – rất nhanh thắng Dịch thuật công chứng MIỄN PHÍ 02 Tờ CC. - Duration: 5:54. 
For more infomation >> Nissan Juke DIG-T 115PK S/S CONNECT EDITION | NL AUTO | 1E EIG. | NAVI - Duration: 1:00. 
For more infomation >> Jaguar S-Type 2.5 V6 EXECUTIVE AUT, ERG MOOI !! - Duration: 0:59. 
For more infomation >> Jaguar S-Type 3.0 V6 SPORT AUT,NAVI,LEDER,SCDAK - Duration: 0:58. 
For more infomation >> Mercedes-Benz S-Klasse 320 CDI Prestige Plus - Duration: 0:58. 
For more infomation >> Fiat Seicento 1.1 S - Duration: 0:59. 
For more infomation >> Audi A5 Coupe 1.8 TFSI PRO LINE S [S-Line] 170pk Automaat, Vol leer, Navi, Xenon - Duration: 0:59. 
For more infomation >> Audi A3 Sportback 1.4 TFSI PRO LINE PLUS S-line ext. XENON/NAVIGATIE - Duration: 0:58. 
For more infomation >> Audi A6 Avant 3.0 V6 TDI QUATTRO SPORT EDITION 2x S-LINE 272PK **LANEASS./CAMERA/SP.LEDER/SIDEASS./A - Duration: 0:54. 
For more infomation >> Voici mon Canada: Je vais vous montrer mon Canada - Duration: 0:21. 
For more infomation >> Alfa Romeo MiTo 1.4 Progression 95PK AIRCO PARKEERHULP A BLEU &ME ELC PAKKET CHROOMPAKKET LMV 17 IN - Duration: 0:58. 
For more infomation >> Audi A4 € 3.777,- voordeel. Limousine Design Pro Line TSI 150 pk S-tronic (vsb14864) Rijklaar! Rij - Duration: 0:56. 
For more infomation >> Ford Focus 1.6 trend 5 deurs - Duration: 1:01. 
For more infomation >> DÉFI: 100 HAND SPINNERS EN MÊME TEMPS ! - Duration: 3:28. 
For more infomation >> Opel Corsa 1.3 CDTi EcoFlex S/S Cosmo - Duration: 0:59. 
For more infomation >> HSN | PRAI Beauty / Tweak-d Haircare 05.25.2017 - 01 AM - Duration: 1:00:01. 
For more infomation >> BMW X3 2.0D XDRIVE HIGH EXECUTIVE Aut | Leer | Navi | Pano Dak | Xenon | Trekh. Afn. - Duration: 1:01. 
For more infomation >> Toyota RAV4 2.2 D-CAT LINEA SOL 4X4 - Duration: 0:57. 
For more infomation >> Volvo V50 2.0D EDITION II Boekjes NAP Airco PERFECT Onderhouden! NL Auto '07 - Duration: 1:01. 
For more infomation >> Opel Vivaro 2.0 D 84KW - Duration: 0:54. 
For more infomation >> Kia cee'd Sportswagon 1.0 T-GDi GT-Line NIEUW! - Duration: 1:01. 
For more infomation >> Kia cee'd 1.6 GDI DynamicLine - Duration: 1:02. 
For more infomation >> Kia cee'd 1.6 CRDi Business GT-Line - Duration: 0:54. 
For more infomation >> Volvo C30 1.6D DRIVe Sport Leder 17 Inch Navi - Duration: 0:41. 
For more infomation >> UN TRAILER POUR GTA RP ?! - Duration: 2:15. 
For more infomation >> Who won the battle "FASHION" of the G7 WAGs? Melania, Brigitte Macron Or Akie Abe - Duration: 3:34. 
For more infomation >> Romina Power, parla Albano: "Sapevo sarebbe finita. Lei…" - Duration: 3:44. 
For more infomation >> Pakistan Air Force Jet Crashes While On Training Mission - Duration: 1:45. 
For more infomation >> The Sunday Mass - Ascension of the Lord (May 28, 2017) - Duration: 29:50. 
For more infomation >> Seat Altea XL 1.4 TSI Sport Climate/PDC - Duration: 0:59. 
For more infomation >> Volkswagen Tiguan 1.4 TSI Sport&Style 4Motion LEDER/NAV/CLIMATE/PANORAMADAK/CAMERA/XENON - Duration: 0:59. 
No comments:
Post a Comment