PaaS - Cloud Service OS maintenance

How exactly are Windows Updates patches handled by Azure PaaS (Cloud Service)?
If the Operating System Version is set to Automatic does the Fabric Controller apply updates as required using the "Update Domain" to stagger the updates to the role instances?
Do these updates occur at set schedule, eg Patch Tuesday?

Hi Michael,
Thanks for posting!
Firstly, I suggest you could refer to this helpful blog from this link (http://blogs.technet.com/b/markrussinovich/archive/2012/08/22/3515679.aspx ).
>>How exactly are Windows Updates patches handled by Azure PaaS (Cloud Service)?
For this issue, I suggest you could see the 'PaaS Update Orchestration' part on above link.
>>If the Operating System Version is set to Automatic does the Fabric Controller apply updates as required using the "Update Domain" to stagger the updates to the role instances?
You can find more information about Update Domains, Fault Domains and Availability Sets in Windows Azure conference sessions, recordings of which you can find on my Mark’s Webcasts page
here.
Windows Azure MSDN documentation describes host OS updates
here
and the service definition schema for Update Domains
here.
>>Do these updates occur at set schedule, eg Patch Tuesday?
For this issue, you could view the Kevin's blog from this
link.
Hope this helps.
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Similar Messages

Azure PAAS Cloud service Role restart scenario

Hi Azure team,
I want to know if i'm changing any configuration setting value through azure portal, Will it restart the Role instance?
Steps:
Azure portal login->cloud service->configure->change and save the configuration value.

It depends on the change, adding disks won't restart. Changing the underlying hardware - i.e. changing the size of the machine will force a restart.

Deallocating a Web/Worker Roles Cloud Service

I'm seeking some clarification on whether its possible to shutdown a PaaS Cloud Service into a non-chargeable state in the same way one can do this with IaaS virtual machine deployments? In an automated CI/CD environment then PaaS is attractive but paying
for instances we use for development to run the 16-18 hours a day no one is using them isn't. Yet shutting down at night and restarting IaaS VMs in the morning via scheduled automated tasks appears fairly trivial to achieve.
Shutting down PaaS instances via Powershell or the Management API fails, stopping the service via the portal appears to still leave them chargeable. So the only solution currently appears to be fully delete them and then recreate when you need
them again (along with the time penalties spinning up new instances carries). Am I missing something or is this really not possible? If it isn't possible then is it something that is in the pipeline? (I had heard on the grapevine that the PaaS solution that
currently exists is pencilled in to be replaced/removed).

Hi,
Worker and Web Roles are charged per hour of deployment so even if doing nothing it is being charged out as you have physically commission the vm to be spun up. Even if the role is stopped but the deployment hasn't been deleted you will still pay for the
instance. So, it is not possible now, At currently, please vote this voice:
http://feedback.azure.com/forums/34192--general-feedback/suggestions/6887568-not-bill-for-a-stopped-cloud-service
Best Regards,
Jambor
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Cloud Services

Hi,
If I'm right (and read correctly earlier posts) Web Role(s) and Worker Role(s) in a Cloud Service can only be created in a Visual Studio project? What about a SQL Server (e.g. Web Edition) database in a Cloud Service? Can this also be created in Visual Studio?
I suppose there's a difference between the Windows Azure SQL Database and the Windows Azure Cloud Service SQL Database?
One additional question: besides that a Cloud Service (web/worker role) are managed (PAAS), I suppose I can use for a "worker role" and "web role" also a virtual machine, and for a "web role" eventually also a web application:
in which case is it best to select which of the options?
Thanks.

Hi,
>>Web Role(s) and Worker Role(s) in a Cloud Service can only be created in a Visual Studio project?
We can use visual studio to create web role or worker role only click a few times, but visual studio is not the only way to create web role or worker role, we also can use command line to do this. see more at:
http://www.windowsazure.com/en-us/documentation/articles/cloud-services-php-create-web-role/#AddRole
>>What about a SQL Server (e.g. Web Edition) database in a Cloud Service? Can this also be created in Visual Studio?
Base on your description, Windows Azure Cloud Service SQL Database may be the sql database on-premise, refer to
http://stackoverflow.com/questions/3235164/what-is-the-difference-between-sql-azure-and-sql-server-2008 for more information about the difference, we can create azure table via visual studio, refer to
http://stackoverflow.com/questions/15604413/gui-for-creating-azure-database-tables for more details.
When we deploy one application to azure cloud service, we can see all instances in azure manage portal in cloud service "INSTANCE" tab, each instance was a vm, if we do some special things (such as configure IIS install server) we can choose
azure vm, if we use cloud service instance, all your configure may be lose after restart.
Best Regards
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Cloud service web role did not get request

Hi Team,
we have an application host in web role in a cloud service,
sometimes it keeps loading when clicking a button in GUI and got no response till our GUI timeout (30 minutes)
we use Fiddler to trace the http request and also check IIS logs and found that sometimes the web role didn't get a request, sometimes the IIS
got the request and finished to processe the request but didn't return result to GUI.
it seems the message lost during interaction between UI and web role.
note that this problems comes out just recently.
is there some known issues related with this kind of problems.
thanks in advance.

hi Baker,
Firstly, I need confirm what's meaning is GUI from your description ? The GUI is your cloud service project UI? Or your UI in your client?
Secondly, base on my experience, we usually could occur timeout error because of the azure load balancer and the long time request.
For this error, I recommend you refer to those thread:
Azure Web Role - Long Running Request (Load Balancer Timeout?)
Windows Azure Load Balancer TimeOut for Cloud Service Roles (PAAS Web/Worker)
Windows Azure Load Balancer Timeout Details
http://social.msdn.microsoft.com/Forums/windowsazure/en-US/89b283f0-dfca-49a7-99fe-c3b73d77ff6d/azure-load-balancer-sending-http-request-to-multiple-web-role-instances?forum=windowsazuredevelopment
If I misunderstood, please let me know.
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Direct Traffic to one node in Cloud Service

Is there a way to make a cloud service (web role) always use one of the nodes, there are two in this scenario, and only direct to the other one if the first one gets shut down. We have a piece of legacy software we use in our Cloud Service and we are waiting
on it being updated so it can work across the load balancer, but currently it does not. So we only have one node in the service. I would like to have two and see if we can always hit node 1 for example, and then hit node 2 if 1 is down. I am assuming, maybe
wrongly, that this would still be within SLA, and if maintenance was happening then both nodes would not get shutdown. Is it possible to maybe have a web role class which controls the load balancer traffic?
Thanks
Eamonn

Hi Eamonn,
Thanks for your posting!
>>Is there a way to make a cloud service (web role) always use one of the nodes, there are two in this scenario,...
Base on my experience, if we have one or more instances of a VM (Web or Worker role), the traffic will be distributed amongst the instances. We isn't allowed to specify which instances. Please see David's psot(http://stackoverflow.com/a/12726613
>> I would like to have two and see if we can always hit node 1 for example, and then hit node 2 if 1 is down. I am assuming, maybe.....
About this requirement, I suggest you could try to those steps:
1.create a web role with adding a web service or create a web role using WCF service.
2.create a service with the instance information, like this:
[WebMethod]
public ReturnResult ReverseString(string value)
ReturnResult rr = new ReturnResult();
rr.ReturnString = new string(value);
rr.HostName = RoleEnvironment.CurrentRoleInstance.Id;;
return rr;
//Class
public class ReturnResult
private String returnString;
public String ReturnString
get { return returnString; }
set { returnString = value; }
private String hostName;
public String HostName
get { return hostName; }
set { hostName = value; }
3.Host this service on azure cloud service
4.Create a new project whatever it is webpage or console application.
5.using the Thread Pool or BackgroundWorker to send the concurrent request.
6.Check the results list and host name.
After made it, you could get the every requests hot which instances .
If you'd like to custom the Azure loadbalancer, I recommend you could refer to those documents:
http://msdn.microsoft.com/en-us/library/azure/jj151530.aspx
http://blogs.msdn.com/b/kdot/archive/2013/06/29/implementing-custom-load-balancing-with-sticky-connections-on-windows-azure.aspx
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Add Operational Insights to Cloud Service during publish

Hello,
I have several Azure Services that I am already utilizing Application Insights on. What I would like to do is have Operational Insights added during the standard "Publish to Windows Azure" that I use from Visual Studio thereby removing the need
to manually remote into the machine and then install Microsoft Monitoring Agent and configuring my account. Can you point me to some resources demonstrating or explaining how to accomplish this?
A couple of notes:
My group has dozens of services and workers so manual install/configure is not an option for us.
All of our machines currently also have Application Insights setup and running so MMA already has a tab for Application Insights that displays if you open MMA however, there is no tab available in MMA for Operational Insights. The only way that I can add
this tab is to uninstall and then re-install using the installer found on the Operational Insights site however, doing so removes Application Insights.
Thanks!

We are working on a VM Extension to push the agent into IaaS VMs from Azure Portal as a first class experience.
The community has also come up with a DSC resource already anyway!
http://www.powershellmagazine.com/2014/11/26/dsc-resource-module-for-microsoft-monitoring-agent-install-and-configuration-for-azure-operational-insights/
For Cloud Services, we don't need/use the agent but support them already by pulling their logs from WAD - if the roles are configured to write to WAD (the usual way) we'll pick Windows Events and IIS logs (at the moment) - more data sources ideas pls see
this category on the feedback forum
http://feedback.azure.com/forums/267889-azure-operational-insights/category/88086-log-management-and-log-collection-policy
We think a lot of the other scenarios/IP's don't make sense for PaaS:
- System Updates: since PaaS roles are auto-updated
- AntiMalware: we are investigating how to support Anti Malware scenario using logs - read the comment from Richard on this thread for queries using Windows Events you can do today for that scenario
http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6519202-support-other-antivirus-products-in-malware-assess#comments
- Capacity is currently only focused on HyperV (private cloud) but we'll be able to support 'performance' type information thru WAD again
http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6662146-open-up-the-capacity-management-pack-for-other-sys so no agent needed either...
- SQL Assessment: you don't install SQL in Cloud Services roles; you do in IaaS VMs.
and so on...
The agent for AppInsights and OpInsights at the moment are not compatible - see this
http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6660334-it-s-good-if-we-have-single-mma-file-for-appinsigh but again, you use Appinsights agent in your Web Roles, and you use OpInsights agent in your VMs, and for the
web roles you get the info into OpInsights from WAD. that is the most common use case.

Adobe Cloud Services

How comes Adobe Cloud services is not available to people in Africa?

There is a special sub forum for iOs Reader:
http://forums.adobe.com/community/adobe_reader_forums/ios?view=discussions

Unable to connect to VM's in new cloud service via express route

We have changed our express route setup, initially we had an express route via London, but we have added a second one via Amsterdam and removed the one via London. All existing and new vm's in the different vnet's have connection to our local datacenter,
but as soon as we create vm's in a new cloud service the published routes don't seem to be picked up and the machine are only reachable in their local vnet on azure.
Does anyone have an idea where to look, it looks like the route publishing does not seem to work correctly, but it is strange that new vm's in existing cloud service do work correctly. BGP peering and vnet have been provided access via the expressroute and
all have status provisioned.

Hi Syed,
When I try to connect to a new vm via rdp or try to do a tracert to the machine (with firewall turned off on the vm) I don't get a response (traffic is routed via the express-route correctly). If I do a tracert to an ip on the on premise network
from the vm in question the trace is directed to internet instead of to the on premise network via the express route.
the new cloud services were created in the same region as the working cloud services and the vm's are also in the same vnet/subnet as the working vm's. If I delete a vm (keeping the disks) from a new cloud service and redeployed it in an existing cloud service
I can reach it again via the internal ip.
We have checked the route publishing and the correct routes are published to the express route/vnet.
When I check the provisioning of the vnet's via get-azurededicatedcircuitlink all the vnet's in question are listed as provisioned.
I'll try to remove the bpgrouting for the original expressroute this evening to see if that helps.
kind regards
Xander

Creative Cloud Service "Not avilable in your country"

Dear Administrator,
We have urgent business needs for using Adobe Creative Cloud services. Our company resides in Türkiye(TURKEY +90 Area Code).
We would like to join the mebership system for minimum 50 users/per year business plan on Creative Cloud but referral warns "Adobe does not have services to/in your country.
So, my first question is;
Will it be a live datacenter servicing business clients in TURKEY soon ?
Or in a way of solution - Shall i try to participate services in the name of an international company which we are part of.(Because we even cannot manage to enter payment site ( restiricted zone from tr-TR) But we can from England.)
Secondly;
If we subscribe services using method mentioned above , will it be a problem after payment and participate in services where our business groups head office in England and using services from TURKEY (Telecoms Network) and deploying applications (CS6 or Adobe pro XI etc) on internal network .
Is there a possibility that happens to occur restrictions on use of applications or activation problems maybe ?
Urgent help and assistance needed!

Adobe Resellers http://adobedealreg.force.com/PartnerSearch?lang=en
-http://www.adobe.com/content/dam/Adobe/en/products/creativecloud/cc/pdfs/cc-availability-m atrix.pdf

We have concerns with Adobe Acrobat DC - document cloud services and how it relates to HIPAA. Has anyone else worked through these issues?

We have questions relating to the Document Cloud services offered with Acrobat DC. We are considering disabling the cloud feature to stay in compliance with HIPAA. Has anyone else worked through these issues?

Hi mikem82897618,
You can refer the following link to know what can be done with Adobe Document Cloud Services when working in Acrobat DC:
Store Files Online, Share & Access From Anywhere | Adobe Acrobat.com
Also, visit this link to know more on how Adobe Document Cloud services are compliant with HIPAA security standards:
E-signatures vs digital signatures | eSign services from Adobe
Please specify more details on the same as why you would need to disable the Cloud feature.
What and where exactly are you facing the trouble?
Let me know.
Regards,
Anubha

How do I tell my clients to configure the connectionstrings for a cloud service?

I have an application that exists in two forms
A Windows Service
A Clouse Service with a Web Worker Role
Both applications have an encrypted connection string in the app.config;
for clients using the Windows Service I know how to tell them to change the config file.
For a cloud service is it possible to edit the configuration file?
I read something about Azure Settings, but I can't find any good information about that, is that the preferred method for setting environment settings in a Cloud Service?
Can you remote in to a VM or whatever hosts the Cloud Service?
Thank you for any help. I am writing the documentation about how to setup the Azure environment and I realized I don't know myself, I only know how to publish with Visual Studio to a cloud service with the values already set. That works, but I can't
tell a client to use Visual Studio.

Hi,
For a cloud service, though it is possible to access instance VMs and do changes on their file system by RDP sessions, but it is not recommended, as you will end up loosing your changes if role instance VMs are restarted.
If you really want to keep certain settings configurable and which will be shared by all your role instances, best way to do is to utilise the cloud service configurations, typically you mention these settings in .cscfg file and you can also edit those using
azure management portal.
You can also access those from your code
string settingValue = CloudConfigurationManager.GetSetting("SettingString");
Read more about it here - http://msdn.microsoft.com/en-us/library/azure/ee405486.aspx
http://haishibai.blogspot.in/2012/09/windows-azure-cloud-service.html
Bhushan | Blog |
LinkedIn | Twitter

Cisco Jabber for Telepresence 4.6.3 Setting for "Webex Telepresence" Cloud Service

I am looking for the server setting that can be installed into the Cisco Jabber for Telepresence Client (MOVI) that will allow it to connect to the "Webex Telepresence" cloud service. I cannot find a download anywhere that has the infomation re-configured for the "Webex Telepresence" service.
Thanks for your help in advance
Tim
Well after a few hours of searching i have the Answer
The Client can be downloaded from: http://download.telepresence.webex.com/MCX/4.6.3.17194/WIN/JabberVideo_4.6.3GA.exe
This will come with the following setting pre-configured: Sign-in Setting > Internal Server: https://boot.telepresence.webex.com/tmsagent/api/rest/devices/movi/provisioning
If you have the JabberVideo Client installed and just want to change where it gets provisioned from VCS or Webex Telepresence then you should be able to use your current client and just change the internal server settings and clear the external setting.
Then you will need to use your Webex Telepresence Login ID and Password.
Hope this helps Someone.
Tim
Message was edited by: Timothy Shire

A1: Because it can use either (webex or CUPS), there are two deployment modes, all is on the documentation if you haven't gone thru it.
You type in what it's asking, nothing more. Choose one, and then use the CUPS hostname, DNS is basically mandatory, the PC needs name resolution for all you have configured (VM/CUCM/etc)
A2: No, it can be IM&P, full UC and phone mode. No, Full UC and phone mode use the PC for media termination, deskphone control uses the phone for media. Did you change the parameters during install for phone mode??? If not, it's not in phone mode.
A3: No, that can be many things, DNS, connectivity, credentials, etc
You mention DNS is not used, so, most likely that's the problem.
I'd strongly recommend you to review the whole deployment guide for Jabber for Windows.
HTH
java
if this helps, please rate
www.cisco.com/go/pdihelpdesk

Is it possible to use both an ILB and an ELB (listening on the same port) in the same Azure cloud service?

I'm building a test Lync deployment on Azure; yes, I know this is not supported, hence "test".
Lync Front-End servers expose two set of web services, one for internal users and one for external ones; they listen on different ports (443 and 4443) on the same servers; when external services are published, you need a reverse proxy or a port forwarding
in order to map port 443 of a public IP address to port 4443 of the Front-End server(s). When you have multiple Front-End servers in a pool, you also need to load-balance them.
So, a typical Lync deployment looks like this:
       Internal users
               |
               443
                  |
          Internal LB
        192.168.0.20
        443         443
          |               |
   Lync FE 1     Lync FE 2
192.168.0.21 192.168.0.22
          |               |
      4443        4443
          External LB
       Public IP Address
                 |
              443
                 |
       External Users
This should be easily replicated in Azure, as it supports both external load balancing and internal load balancing. They are even supported together in the same cloud service, so this configuration should be easy. However, it looks like "should"
is the keyword here.
After creating the external load balanced endpoint (which listens on external port 443 and forwards to port 4443 on the servers), I'm trying to create an internal load balancer and add internal endpoints to is; however, while the ILB can be created successfully,
adding an internal endpoint listening on port 443 and forwarding to port 443 on the servers fails miserably, with an error stating that port 443 is already in use by another endpoint:
Update-AzureVM : BadRequest : Port 443 is already in use by one of the endpoints in this deployment. Ensure that the port numbers are unique across endpoints within a deployment.
For reference, my commands are:
Add-AzureInternalLoadBalancer -InternalLoadBalancerName "LyncILB" -ServiceName "LyncFrontEnd" -SubnetName "LabSubnet" -StaticVNetIPAddress 192.168.0.20
(This completes successfully)
Get-AzureVM LYNCFE1 | Add-AzureEndpoint -Name "Https-Int" -Protocol "tcp" -LocalPort 443 -PublicPort 443 -LBSetName "HttpsIntLB" -DefaultProbe -InternalLoadBalancerName "LyncILB"
(This fails)
The existing external endpoint is configured as such:
Get-AzureVM LYNCFE1 | get-azureendpoint
LBSetName : HttpsExtLB
LocalPort : 4443
Name : HTTPS-Ext
Port : 443
Protocol : tcp
Vip :
ProbePath :
ProbePort : 4443
ProbeProtocol : tcp
ProbeIntervalInSeconds : 15
ProbeTimeoutInSeconds : 31
EnableDirectServerReturn : False
Acl : {}
InternalLoadBalancerName :
IdleTimeoutInMinutes :
LoadBalancerDistribution :
The error doesn't even make a lot of sense; the external load balancer listens on a public IP address, while the internal load balancer listens on a private IP address in the internal network; there
shouldn't be any conflict here... however it looks like there is one instead.
Why doesn't this work? Am I doing something wrong, or is Azure networking just being silly as usual again?

Hello Massimo Pascucci,
The issue that you are facing when creating an endpoint with internal loadbalancer is the limitation of not allowing same ports to be listening under a single cloud service. This reason for this is that there is a limitation of only one private IP (Also
known as the Internal load balanced IP) per cloud service.
There is also a limitation on the Internal load balancer more than one port to be published per load balancer:
You can leave your feedback by following the link below:
https://social.msdn.microsoft.com/Forums/en-US/1805c5a0-3906-4cd6-8561-9802d77e0ae5/is-it-possible-to-use-both-an-ilb-and-an-elb-listening-on-the-same-port-in-the-same-azure-cloud?forum=WAVirtualMachinesVirtualNetwork
Refer to this article for more information on Internal load balancer:
http://azure.microsoft.com/blog/2014/05/20/internal-load-balancing/
Thanks,
Syed Irfan Hussain

Welcome to the Cisco CSR (Cloud Service Router) Discussion Forum

Welcome to the Cisco CSR (Cloud Service Router) Discussion Forum!
This forum helps CSR users interact, share knowledge and build communities with one another.
We hope you enjoy participating in the CSR discussion forum!
Best Regards,
Cisco CSR Product Team

hi,I have a question on sql database high availability. I have tried using database mirroring, where I am using sql standard edition, in this database mirroring of synchronous mode is the only option available, and it is giving problem, like sql time out errors on my applicatons since i had put in the database mirroring, as asynchronous is only available on enterprise version, is there any suggestions on this. thanks ---vijay

PaaS - Cloud Service OS maintenance

Similar Messages

Maybe you are looking for