Best Practice while configuring Traffic Manager for Azure Website

Hi Team,
I want to understand What is the best practice while we configure traffic manager for Azure website.
To give you the base, Here let me explain my requirement. I have one website which 40% target audiences would be East US, while 40% would be UK and rest 20% would be from Asia-pacific.
Now, What I want is Failover + Performance based Traffic Manager Configuration.
My thinking:
1) we need to create 1 website with 2 instances in each region (east us, east asia, west us for an example). so, total 3 deployment of website. (give region based url for the website)
2) create traffic manager based on performance and add 3 of those instances. that would become website-tmonperformance
3) create traffic manager based on failover and add 3 of those instances. that would become website-tmonfailover
4) create traffic manager and ?? don't know the criteria but add both above traffic manager here and take your final url for end user.
I am not sure (1) this may be the right approach or not (2) if this is right, in the 4th step which criteria we should select while creating final traffic manager round-robin/ performance/ failover?
after all these if use try to access site from US.. traffic manager will divert that to US Data-Centre or it will wait for failover and till that it will be served from east-asia if in configuration, east-asia is my 1st instance?
Regards, Brijesh Shah

Hi Jonathan,
Thanks for your quick reply. actually question is bit different. Let me explain you different way.
I was asking for recommendation from Azure Traffic Manager team. whether my understanding is correct or not.We want Performance with Failover.
So, One azure website we have: take an example todoapp. I deployed that in 3 different region. now, I want to have performance based routing as well as failover based routing. but obviously I can't give two URL to my end user. so, at the top of that I will
require one more traffic manager. So,
step 1: I will create one traffic manager with performance criteria named: TMForPerformance.trafficmanager.com where I will add all those 3 instances (all are from different region so, it want create any issue.)
step 2: I will create one more traffic manager with failover criteria named: TMForFailover.trafficmanager.com where I will add all those 3 instances (all are from different region so, it want create any issue.)
step 3: I will create one final traffic manager with performance criteria named: todoapp.trafficmanager.com where I will add these two traffic manager instead of 3 different region's website.
Question 1) Is it correct structure if we want to achieve Performance with Failover or Is there any better solution?
Question 2) in step 3, what criteria we should select? performance/ round robin/ failover
Regards, Brijesh Shah

Similar Messages

Best practice to use the Slot on Azure Website

Hi Team,
I want to understand the website slot feature little deeper. Can anyone suggest that How should we plan while we have testing, staging & production environment on Azure? (Development might be from Visual Studio Azure Emulator)
Take an example, we have ToDoApp. How should we use Azure Website & Slot feature to make it available for Testing, Staging & Production?
Q1) Should we create two different site (1 for Testing and Staging while 2 for Production) or should we use all in one with 3 slot?
Q2) If we create two different site like as I said in Q1 How should we move the package from Staging to Production once it done with staging?
Q3) If we have one single site instead of two, Can we have role based feature like, Whoever is swapping the slot from testing to staging would do upto that level only. while from staging to production except Product Admin no-one can do?
Q4) If none of the above is recommended then what would it be & How should we use swapping feature there for move package on production?
Regards, Brijesh Shah

Hi Brij,
Deployment slots were developed with whole development lifecycle in mind. A good practice is to have a source control branch for stage of the environment so you know what are the changes. There are generally two types of development:
One branch - always fix forward and goes to production at least once per day. The build might get deployed to staging environment (slot) to run full functional validation before taking live traffic and then deployed to Production. With Azure Websites this
could be as simple as swap staging to Production slot. After swap (new) staging is ready to take next build and run another set of validation. So one site with many slots here
Multiple branches - when deploying to Prod is slower you need multiple branches and slots, and stabilization phase. This means you can have Dev branch where is vNext - vNext slot (you can setup continuous deployment here so every check in is deployed),
Main branch where only selected changes are integrated or when is time for a major Release or hotfix - points on Stage slot, Release branch pointing to PreRelease slot which later to be swapped with Production after deployment to avoid
cold start. Better to stay with one site and may slots as well but current limitation is 5 slots.
Thus said swap is the easiest way to move code thru stages :). There are many features there that can be used:
during swap some settings stay at slot while others are moved with the code (this is available only in PowerShell and SDK at the moment)
Auto swap - to avoid cold start you can deploy to PreRelease slot and auto swap with Production slot right after it finishes the deployment (this is available only in PowerShell and SDK at the moment)
TiP - redirect only small % of the traffic to PreRelease slot (vNext or your choice) to expose let's say 1 % of customers to new code base.
Video
on Q3: RBAC(role based access control) allows you to do exactly this. only admin can have access to Production slot and separate groups can have access to other slots. Thus only admin can swap with production
Hope that helps,
Galin Iliev [MCSD.NET, MCPD], http://www.galcho.com

Is there a list of best practices for Azure websites?

Hi all;
I was talking with a Sql Server expert today and learned that Azure Sql Server can take up to a minute to respond to a query that normally takes a fraction of a second. This is one of those things where it's really valuable to learn it when architecting as
opposed to when we go live.
Websites are not Sql Server (obviously) but that led to the question - Is there a list of best practices for Azure Websites? If so, what are they?
We will be the website in multiple datacenters and using traffic manager to point people to the right one. The website will run as a REST server using Web API 2, mostly for license checks from our app running on corporate Exchange servers. And a small part
will be for javascript based web pages used for account CRUD.
thanks - dave
What we did for the last 6 months -
Made the world's coolest reporting & docgen system even more amazing

sorry I was not sure if you were using a web server or what?
One other idea out of the slow cooker is to use a dedicated web server with SQL server running beside IIS
If you are using the standard web sites, then the SQL option is about as slow as FTP uploads, very slow
I have considered time of day too, and it seems Azure is less loaded early in the AM
Corsair Carbide 300R with TX850V2 Asus M5A99FX PRO R2.0 CFX/SLI AMD Phenom II 965 C3 Black Edition @ 4.0 GHz G.SKILL RipjawsX DDR3-2133 8 GB EVGA GTX 660 Ti FTW Signature 2 (GK104 Kepler) Asus PA238QR
IPS LED HDMI DP 1080p ST2000DM001 & Windows 8.1 Professional x64 Microsoft Wireless Desktop 2000 & Wacom Bamboo CHT470M Place your rig specifics into your
signature like I have, makes it 100x easier to understand! <a href="http://hardcore-games.azurewebsites.net/" target="_blank">Hardcore Games</a> Legendary is the Only Way to Play!

Quick question regarding best practice and dedicating NIC's for traffic seperation.

Hi all,
I have a quick question regarding best practice and dedicating NIC's for traffic seperation for FT, NFS, ISCSI, VM traffic etc. I get that its best practice to try and separate traffic where you can and especially for things like FT however I just wondered if there was a preferred method to achieving this. What I mean is ...
- Is it OK to have everything on one switch but set each respective portgroup to having a primary and failover NIC i.e FT, ISCSI and all the others failover (this would sort of give you a backup in situations where you have limited physical NICs.
- Or should I always aim to separate things entirely with their own respective NICs and their own respective switches?
During the VCAP exam for example (not knowing in advance how many physical NIC's will be available to me) how would I know which stuff I should segregate on its own separate switch? Is there some sort of ranking order of priority /importance? FT for example I would rather not stick on its own dedicated switch if I could only afford to give it a single NICs since this to me seems like a failover risk.

I know the answer to this probably depends on however many physical NICs you have at your disposal however I wondered if there are any golden 100% rules for example FT must absolutely be on its own switch with its own NICs even at the expence of reduced resiliency should the absolute worst happen? Obviously I know its also best practice to seperate NICs by vender and hosts by chassis and switch etc

IPS Tech Tips: IPS Best Practices with Cisco Remote Management Services

Hi Folks -
Another IPS Tech Tip coming up and this time we will be hearing from some past and current Cisco Remote Services members on their best practice suggestions. As always these are about 30 minutes of content and then Q&A - a low cost high reward event.
Hope to see you there.
-Robert
Cisco invites you to attend a 30-45 minute Web seminar on IPS Best   Practices delivered via WebEx. This event requires registration.
Topic: Cisco IPS Tech Tips - IPS Best Practices with Cisco Remote Management   Services
Host: Robert Albach
Date and Time:
Wednesday, October 10, 2012 10:00 am, Central Daylight Time (Chicago,   GMT-05:00)
To register for the online event
1. Go to https://cisco.webex.com/ciscosales/onstage/g.php?d=203590900&t=a&EA=ralbach%40cisco.com&ET=28f4bc362d7a05aac60acf105143e2bb&ETR=fdb3148ab8c8762602ea8ded5f2e6300&RT=MiM3&p
2. Click "Register".
3. On the registration form, enter your information and then click   "Submit".
Once the host approves your registration, you will receive a confirmation   email message with instructions on how to join the event.
For assistance
http://www.webex.com
IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and   any documents and other materials exchanged or viewed during the session to   be recorded. By joining this session, you automatically consent to such   recordings. If you do not consent to the recording, discuss your concerns   with the meeting host prior to the start of the recording or do not join the   session. Please note that any such recordings may be subject to discovery in   the event of litigation. If you wish to be excluded from these invitations   then please let me know!

Hi Marvin, thanks for the quick reply.
It appears that we don't have Anyconnect Essentials.
Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 100            perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Active perpetual
VPN-DES                           : Enabled        perpetual
VPN-3DES-AES                      : Enabled        perpetual
Security Contexts                 : 2              perpetual
GTP/GPRS                          : Disabled       perpetual
AnyConnect Premium Peers          : 2              perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 250            perpetual
Total VPN Peers                   : 250            perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
UC Phone Proxy Sessions           : 2              perpetual
Total UC Proxy Sessions           : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
Intercompany Media Engine         : Disabled       perpetual
This platform has an ASA 5510 Security Plus license.
So then what does this mean for us VPN-wise? Is there any way we can set up multiple VPNs with this license?

How to setup Traffic Manager with Azure API Management

Hello-
I have been trying to configure traffic manager as a Failover mechanism for Azure API Management (not sure if this is the correct terminology).
The gist is this: I have configured Azure API management to point to a set of Web API's hosted in a Cloud Service. I would like to use Traffic Manager as a Failover mechanism to route requests to a different data center, should the primary service becomes
unresponsive or goes into a degraded state.
When going through the portal, there is no selection that is available to configure API Management/Web API: the selections are Cloud Service and Web apps.
I've also looked into th Powershell Add-AzureTrafficManagerProfile using the -Type ["Any"] option with same result - it adds the endpoint but it is in a "Degraded" state.
I need to understand the correct way to accomplish this - I'm pretty sure I'm doing something wrong.
gigabit

Hi Shaun,
For most Traffic Manager applications, endpoint health is probed in the same way on each endpoint. That's why Traffic Manager profiles have endpoint monitoring settings configured at the profile level, not the endpoint level.
It appears your case is an exception--you need to configure a different monitoring path for each of your endpoints. To do this, you should use
'nested' Traffic Manager profiles. Create a child profile for each endpoint (with endpoint monitoring settings particular to that endpoint) and then join them in a parent profile. Endpoint health will propagate up from child to parent and should
give the behaviour you're looking for.
There's no downside: We bill only for the actual monitored endpoints and actual queries received (so no extra costs), and the parent-child link will be unwound within the Traffic Manager name servers (so no extra latency).
Regards,
Jonathan Tuliani
Program Manager
Azure Networking - DNS and Traffic Manager

Facing some problem while configuring Workflow Manager 1.0.

Hi,
I am facing some problem while configuring Workflow Manager 1.0. in my farm.
Scenario is,
I have installed and configured workflow manager in my farm, it was working well with no issue. But one of team member played with AD and deleted Farm administrator's entry from AD by mistake. So suddenly workflows get affected and stopped working.
Then I added administrator entry in AD, uninstalled the Workflow Manager and installed it again. But now while configuring workflow manager I am facing some issues that "Failure to adding user in BUILTIN\Administrative group. Please add it manually"
And after sometime it shows another error message that, "Starting service Service Bus Massage broken failed: Timed out has expired, the operation has not been completed"
If I go for services then "Service bus Message broker" service is not running properly (Its status is just showing "Starting") and don't starts.
I have also added the user in BUILTIN\Administrator, IIS_IUSER, WSS_WPG group of the machine from computer manager - user and groups.
Also given permission to databases, and assign role of sysadmin and dbcreator to user
I also tried following steps
1) Stop all services associated to workflows
2) Uninstalled workflow manager
3) Deleted all databases associated with workflows
4) Installed workflow manager and tried to configure.
But showing same error.
If I use another SharePoint server farm to configure workflows, there I am not getting first error of adding user to BUILTIN\Administrator group. but second error remains same.
We having SQL server and Active directory at another machine and FARM at another machine, if I use local admin for configuration of the workflows (as local admin can start any services) but entry of local admin is not Active directory so can not assign SQL's
sysadmin, and dbcreator role to local admin.
I am attaching snapshot of error for better understanding.
Your help will be very precious to me.
Thanks,
Rajesh
Rajesh Agravat

Rajesh
Check to see what the service accounts are being used for these Workflow Manager 1.0 services:
Service Bus Message Broker
Service Bus Gateway
Workflow Manager Backend
All of these should be running and your workflow service account should be running all of these. If any are still configured under the old service account, they'll need to be updated. Next, check to see what service accounts have access to the
Workflow Manager 1.0 databases:
SbGatewayDatabase
SbManagement
SbMessageContainer
WFInstanceManagement
WFManagement
WFResourceManagement
The Workflow Manager service account should be mapped as the DBO for all of these. if any are still configured under the old service account, they'll need to be updated.
Given the complete loss of the original workflow service account, and the resultant impact on security configuration throughout the workflow farm, I would recommend performing a re-installation. Do it thus:
Launch Workflow Manager Configuration Wizard
Select the Leave Workflow Manager Farm
Stop all workflow services (see above list)
Repeat steps 1-3 for each instance of Workflow Manager 1.0 Server installed.
Delete all Workflow Manager databases (see above list).
reboot.
Start new installation.

Database Validation Failed error while configuring RDBMS profile for audit

Hi,
I am using Oracle Access Manager 10.1.4.3.0 with FMW 11g (Oracle internet Directory and Oracle Virtual Directory) on Linux X64.
While configuring RDBMS profile for OAM Auditing and reporting...
I am getting "Database Validation Failed" error both in Identity and Access servers
When I am looking in oblog...I got following in Identity..
2010/07/17@06:59:28.882658     17384     17422     CONNECTIVITY     DEBUG3     0x00000201     obmessagechannel.cpp:179     "Sending: "     seqno^13     opcode^8     pMsg^{25}st={5}ma=22{4}mi=2{4}sg=0{4}rt=0
2010/07/17@06:59:28.882704     17384     17422     NET     DEBUG3     0x00000201     obsocket.cpp:848     "ObSocketOIS::WriteFully"     _sock^19     LocalAddr^10.31.13.129     LocalPort^6022     RemoteAddr^10.31.13.134     RemotePort^41646
and in Access..
2010/07/17@06:39:09.391459     3326     3388     AUDIT     ERROR     0x00001D04     ../dbauditwriter.cpp:410     "The database audit writer was unable to perform the write"
2010/07/17@06:39:09.391491     3326     3388     AUDIT     WARNING     0x00001149     /usr/abuild/Oblix/10143hf/palantir/aaa_server/src/audit_handler.cpp:1119     ""Unable to write the audit record"
Kindly advice...

Hi.
Strange !
Check whether the RFC destiantion LCRSAPRFC is proper. Test the connection and Also check the exchange profile paramteres in the XI.
Also refer
http://help.sap.com/saphelp_nw2004s/helpdata/en/c6/6f1741b393f26fe10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/f4/67b340be3dff5fe10000000a155106/frameset.htm
Also check what user is maintained via transaction SLDAPICUST. and carefully enter the password, also check that if user is locked.
Hope this will help you a bit.
Regards
Aashish Sinha

Error while configuring talent profile for ESS

Dear Experts
I am having following error while configuring talent profile for ESS:
The URL http://pplkhidr05.ppl.com.pk:8000/sap/bc/webdynpro/sap/hrtmc_employee_profile was not called due to an error.
Note
The following error text was processed in the system TRG : Access via 'NULL' object reference not possible.
The error occurred on the application server PPLKHIDR05_TRG_00 and in the work process 0 .
The termination type was: RABAX_STATE
The ABAP call stack was:
Method: GET_PLVAR of program /1BCWDY/81IYQOEI3SKMOOB9TXW5==CP
Method: IWCI_HRTMC_TP_SHARED_DATA~GET_PLVAR of program /1BCWDY/81IYQOEI3SKMOOB9TXW5==CP
Method: OVERRIDE_EVENT_OIF of program /1BCWDY/828X5HC99194NVUUKJ30==CP
Method: IWCI_IF_FPM_OIF_CONF_EXIT~OVERRIDE_EVENT_OIF of program /1BCWDY/828X5HC99194NVUUKJ30==CP
Method: GET_UIBBS_FOR_EVENT of program /1BCWDY/7V06LYNNPH3D2G2T1W0Z==CP
Method: IWCI_IF_FPM_FLOORPLAN_COMP~GET_UIBBS_FOR_EVENT of program /1BCWDY/7V06LYNNPH3D2G2T1W0Z==CP
Method: IF_FPM_FLOORPLAN~GET_UIBBS_FOR_EVENT of program CL_FPM_OIF_INTERNAL===========CP
Method: GET_NEXT_UIBBS of program CL_FPM========================CP
Method: PROCESS_EVENT of program CL_FPM========================CP
Method: RUN_EVENT_LOOP of program CL_FPM========================CP
What can I do?
If the termination type was RABAX_STATE, then you can find more information on the cause of the termination in the system TRG in transaction ST22.
If the termination type was ABORT_MESSAGE_STATE, then you can find more information on the cause of the termination on the application server PPLKHIDR05_TRG_00 in transaction SM21.
If the termination type was ERROR_MESSAGE_STATE, then you can search for more information in the trace file for the work process 0 in transaction ST11 on the application server PPLKHIDR05_TRG_00 . In some situations, you may also need to analyze the trace files of other work processes.
If you do not yet have a user ID, contact your system administrator.
Any suggestions on how to resolve the error?
Regards
Imran

Imran,
check this thread
http://forums.sdn.sap.com/click.jspa?searchID=43957204&messageID=8996092
Thanks
Bala Duvvuri

What are the best practices to migrate VPN users for Inter forest mgration?

What are the best practices to migrate VPN users for Inter forest mgration?

It depends on a various factors. There is no "generic" solution or best practice recommendation. Which migration tool are you planning to use?
Quest (QMM) has a VPN migration solution/tool.
ADMT - you can develop your own service based solution if required. I believe it was mentioned in my blog post.
Santhosh Sivarajan | Houston, TX | www.sivarajan.com
ITIL,MCITP,MCTS,MCSE (W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),Network+,CCNA
Windows Server 2012 Book - Migrating from 2008 to Windows Server 2012
Blogs: Blogs
Twitter: Twitter
LinkedIn: LinkedIn
Facebook: Facebook
Microsoft Virtual Academy:
Microsoft Virtual Academy
This posting is provided AS IS with no warranties, and confers no rights.

Best practice standard User Acess Test for WIN2012 AD

What is the Best practice standard User Acess Test for WIN2012 AD

Hello,
as before, add a computer to the domain and log on with a domain user account to the computer.
You should be able from the client machine to open the sharedfolders on the DCseither with:
\\DCName\sysvol
\\DCName\netlogonor \\NetBiosDomainName\sysvol
\\NetBiosDomainName\netlogon
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Configure incident management for VAR in solution manager 7.0 ehp1

I want to configure incident management for VAR in solution manager 7.0 ehp1, now on service.sap.com all i can find is * SAP Solution Manager 7.1 SP3 VAR Config Guide V1 * under https://websmp204.sap-ag.de/var-partner/.
Can anyone point me to config guides on what needs to be done on the customer end and my end(partner side).
I am trying to fulfill the PCOE requirement below
5. Do you have a fully operational Incident Management System?
Thanks,

hi,
check out the below FAQ and
https://websmp208.sap-ag.de/~sapidb/011000358700000490172009E.HTM
Technical suppport
https://websmp208.sap-ag.de/~sapidb/011000358700000880802009E.PDF
and some more rkt and hw to guides on
https://websmp208.sap-ag.de/~form/sapnet?_SHORTKEY=00200797470000089947&
Thanks,
Jansi

Best Practices in use of ABAP for SRM and/or CRM Configuration

I was wondering if there is a document that defines best practices for the use of ABAP with the installation and customization of SRM and/or CRM. Such as amount of ABAP coding typically required, and best practices around the use of ABAP for customization and configuration.
Thanks.

Hi, Johnson
Sorry, Please don't mind, you are not at right place to ask the Question like this
Please read "The Forum Rules of Engagement" before posting! HOT NEWS!!
Thanks and Regards,
Faisal

Best practice RAID configuration for UCS C260 M2 for Unified Communications?

I have two UCS C260 M2 servers with 16 drives (PID: C260-BASE-2646) and I am trying to figure out what the best practice is for setting up the RAID.
I will be running CUCM, CUP, CUC, Prime, etc. for about 2000 phone environment.
If anyone can offer real world suggestions that would be great. I also have a redundnat server.

The RAID setup depends a bit on your specific configuration; however, there is a guide for Cisco Collaboration on Virtual Servers that you can review here:
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/virtual/CUCM_BK_CF3D71B4_00_cucm_virtual_servers/CUCM_BK_CF3D71B4_00_cucm_virtual_servers_chapter_010.html#CUCM_TK_C3AD2645_00
If your server is spec'd as a Tested Reference Configuration (TRC) then the C260M2 TRC1 would have 16 HDD that you would configure/split into 2 x 8HDD RAID 5 arrays.
Hailey
Please rate helpful posts!

Best Practice on installing Workflow Manager on a separate box

Hi,
We are installing Workflow Manager 1.0 to work with our SP2013 farm, which is fairly simple.
However we anticipate a significant amount of workflow work in the future.
Could you please share your thoughts/experience/lessons learnt on Having WF Manager on a separate box compared to having it on the same box as SP2013 Front end server in terms of
1. Scalability
2. Stability
3. Ease of Installation/Management
etc
Thanks a lot.
Dineth

Hi Dineth,
Thanks for posting your query,
Kindly browse the below mentioned URLs to know about the best practices and installation step by step
http://msdn.microsoft.com/library/azure/jj730571%28v=azure.10%29.aspx
http://www.sjoukjezaal.com/blog/2014/05/sharepoint-2013-workflows-part-2-installing-and-configuring-the-workflow-manager/
I hope this is helpful to you, mark it as Helpful.
If this works, Please mark it as Answered.
Regards,
Dharmendra Singh (MCPD-EA | MCTS)
Blog : http://sharepoint-community.net/profile/DharmendraSingh

Best Practice while configuring Traffic Manager for Azure Website

Similar Messages

Maybe you are looking for