Allen Stewart's Blog

Service Oriented Infrastructure- Virtualization- Virtual Machine Management DSI- SDM-

  • Microsoft Certified Architect Certification

    I wanted to take some time and talk about the Microsoft Certified Architect program.   I was one of the first Architects certified and I have also mentored Architects going for the certification and served on the Microsoft Certified Architect boards.  I certified on the Infrastructure track and man was it an eye opening experience.  My board was by far the most interesting, thought provoking and challenging interviews that I have ever completed.  The interview process was both broad and deep, covered Microsoft and non Microsoft technologies, Infrastructure and some dev questions.  It covered my communication and leadership skills and my knowledge of Architecture frameworks and how I use them to build solutions that map to business requirements. Wow it was great and firmly sold me on the need for Architects in IT.  Here are some interesting blogs and sites that discuss the Architects role:

    http://blogs.technet.com/michael_platt/default.aspx

    http://www.itarchitect.co.uk/

    Allen Stewart

    Microsoft Certified Architect

     

  • Virtualization in the Infrastructure

    I want to start off by saying I love virtulization, the ability to protype an multiple tier architecture on a laptop, conduct learning without 20 physical machines is incredible and consolidate a test lab from 10 physical servers to one. .  I do have some concern about the Infrastructure Architects that rush to virtualize every server without thinking thru the approach. First I would like to say that virtualization trives because of the inability or percieved inablity of being able to run multiple applications on a single server and the current server consolidation climate. The reality is most applications need to have a good isolation layer as most are not designed to be good citizens on a server with other applications (in my experience of looking over leakying, poor performer applications) So we went thru the deploy a server for every application phase and now that we look around,  that has left us with thousands of under utilized servers and the need to rid the infrastructure of the costs associated with them.

    Here marches in virtualization with the promise of reduced costs, less physical servers, easier maintenence and a way for easy consolidation without any architectural thought to the actual needed end state of the consolidated service.  The exercise generally goes like this: CIO issues server consolidation directive Infrastructure folks immediately look over the infrastructure for consolidation targets and what naturally goes first is stuff under thier control (file/print, DNS, terminal services,etc) So lets take one of these services and consolidate terminal services for instance, one of the engineers attended a session from a virtualization vendor and they say it is a great idea to move your terminal servers to virtual machines. Wow, what an idea we could buy an 8 processor machine and run mutliple terminal server instances supporting 40 users per instance (I am being generous). Great idea we can eliminate 8 physical machines and all of the costs associated like power, datacenter footprint, physical server maintenence costs.  I picked terminal services as an example because it is a workload that in the past benefited from a scale out approach to achieve scalability hence the reason why most large shops have alot of Terminal servers. Ok before someone should have of even considered the Virtualization approach I would have looked at the service from a holistic viewpoint. Why are we interesting in consolidating this service, what has caused us to have 50 terminal servers, how do we think we can achieve consolidation, what are the long term business goals of the service, who will run the consolidated terminal service, what new approaches or enhancements should we consider as an approach. This should be the first part of any consolidation exercise of any service only after that is completed can the different architectural approaches be determined. So here is the question is it a better architectural option to run 300-400 users per single terminal server (with redundant servers) or create 10 virtual terminal servers each supporting 40 users. I want to leave this an a exercise for us to mull on and come up with an answer and it is of course loaded with things I did not list that you will have to think thru.

    Allen

     

  • Application Security

    It never ceases to amaze that with all of the Authenication and Authorization options available that devolopers continue to roll thier own application security.  I would have thought that the days of passing encrypted stirngs back to a database would be over to be replaced with kerberos and constrained delegation. The ability to maintain a users identity from the presentation layer to the database row/table sounds like to me a great security forsenics tool for security folks.  My application architect friends tell me thier are to many trade offs doing this like the loss of connection pooling at the database layer (which slows performance). In this sceanrio all connections to the database are accessed under a application user account. While thier has to be a fine line between security and performance and I sometimes wonder if the majority of the roll your own application security ever gets a deep security review of the application code. Anyone have any thoughts on this it would be interesting to here both sides security folks and application architects.

     

    Allen

  • Welcome to Allen Stewart's Web Blog

    Hello everyone welcome to my blog.  First a little about myself, I am a Program Manager in the Windows Server Division focused on the Virtualization, Virtualization Management and DSI workloads.  I have worked at Microsoft for 7 years and before that I worked at IBM and UPS as a System Programmer. I am a Microsoft Certfied Architect (Infrastructure) Enough about me how about the topics that I will be discussing.  I plan to discuss topics like:

    Service Oriented Infrastructure – How to Architect an Infrastructure with Service Oriented Applications in mind. I plan to cover topics ranging from Security, Networking, application integration, and storage if it is infrastructure I will cover it.

    Microsoft Dynamic Systems Initiative -  I plan to discuss the Microsoft DSI tools starting first with the SDM (Service definition model) the SDM toolset will be a part of Visual Studio 2005 Enterprise Architect. Also I plan on covering some real world use cases and get Infrastructure Architects involved with SDM and DSI. SDM or DCML choose your poison!!!

    Virtualization and Virtualization Management-  Focus on building Virtualization solutions, Virtual Machine hosting environments, Virtual machine lifecycle management.  Of course I will cover tips and trick with Microsoft Virtual Server R2.

    Infrastructure Security – Extremely important that today’s Infrastructure Architect is a security expert as well.  I will introduce some topics and point to my security expert colleague’s blog’s as well:

    Jesper Johansson

    Steve Riley

    I promise to make it interesting as well informing.

    Thanks

    Allen Stewart

     

     

     


© 2009 Microsoft Corporation. All rights reserved. Terms of Use  |  Trademarks  |  Privacy Statement
Microsoft
Page view tracker