diff --git a/docs/scenarios/app-platform/api-management/network-topology-and-connectivity.md b/docs/scenarios/app-platform/api-management/network-topology-and-connectivity.md index b268ac80a3..1f429d04c4 100644 --- a/docs/scenarios/app-platform/api-management/network-topology-and-connectivity.md +++ b/docs/scenarios/app-platform/api-management/network-topology-and-connectivity.md @@ -25,6 +25,7 @@ Learn more about the [network topology and connectivity](../../../ready/landing- - Decide whether connectivity to on-premises or multi-cloud environments is required. - Decide if [multi-region deployment](/azure/api-management/api-management-howto-deploy-multi-region) is required to service geographically distributed API consumers. - Consider using a load balancing solution such as [Application Gateway](/azure/application-gateway/overview) or [Azure Front Door](/azure/frontdoor/front-door-overview). +- If you are using Azure ExpressRoute for hybrid connectivity, consider designing for high availability. For more information, see [Designing for high availability with ExpressRoute](/azure/expressroute/designing-for-high-availability-with-expressroute). To ensure ExpressRoute resiliency, see [Azure Proactive Resiliency Library](https://azure.github.io/Azure-Proactive-Resiliency-Library/services/networking/expressroute-gateway/). ## Design recommendations diff --git a/docs/scenarios/azure-virtual-desktop/enterprise-scale-landing-zone.md b/docs/scenarios/azure-virtual-desktop/enterprise-scale-landing-zone.md index 5ec8375a15..9c7cca7151 100644 --- a/docs/scenarios/azure-virtual-desktop/enterprise-scale-landing-zone.md +++ b/docs/scenarios/azure-virtual-desktop/enterprise-scale-landing-zone.md @@ -13,7 +13,7 @@ ms.custom: think-tank, e2e-avd, engagement-fy23 The Microsoft Azure Virtual Desktop landing zone accelerator provides a specific architectural approach and reference implementation for preparing landing zone subscriptions for an enterprise Azure Virtual Desktop deployment. -Its reference implementation adheres to the architecture and best practices of the Cloud Adoption Framework's Azure landing zones, focusing on enterprise-scale design principles. Although this implementation can be deployed in any Azure environment that complies with the [prerequisites](https://github.com/Azure/avdaccelerator/blob/main/workload/docs/getting-started-baseline.md#prerequisites), we recommend that you implement an enterprise-scale landing zone first, [enterprise-scale overview](../../ready/enterprise-scale/index.md) and review the [implementation guidance](../../ready/enterprise-scale/implementation.md) before deploying the enterprise-scale for Azure Virtual Desktop solution. +Its reference implementation adheres to the architecture and best practices of the Cloud Adoption Framework's Azure landing zones, focusing on enterprise-scale design principles. Although you can deploy this implementation in any Azure environment that complies with the [prerequisites](https://github.com/Azure/avdaccelerator/blob/main/workload/docs/getting-started-baseline.md#prerequisites), we recommend that you implement an enterprise-scale landing zone first. For more information, see [Start with Cloud Adoption Framework enterprise-scale landing zones](../../ready/enterprise-scale/index.md). You should also review the [implementation guidance](../../ready/enterprise-scale/implementation.md) before you deploy the enterprise-scale for Azure Virtual Desktop solution. This Azure Virtual Desktop solution is open source. You can adapt its templates to create an architecture that meets your needs. This article's guidance includes design considerations for building an enterprise-ready Azure Virtual Desktop deployment. @@ -40,17 +40,17 @@ Learn the guidelines that direct the design of the Cloud Adoption Framework for The following diagram shows a conceptual reference architecture that demonstrates major design areas and design best practices in an Azure Virtual Desktop environment. -[![Diagram of a reference architecture for an Azure Virtual Desktop environment.](./media/azure-virtual-desktop-architecture.png)](./media/azure-virtual-desktop-architecture.png#lightbox) +[![A diagram of a reference architecture for a Virtual Desktop environment.](./media/accelerator-baseline-architecture.svg)](./media/accelerator-baseline-architecture.svg#lightbox) -_For more information on the design areas labeled A-J in the visual, see the Azure Landing Zone [environment design areas](../../ready/landing-zone/design-areas.md#environment-design-areas). To learn more about the design areas for Azure Virtual Desktop, see [network topology and connectivity for Azure Virtual Desktop](./eslz-network-topology-and-connectivity.md)_ +To learn more about the design areas for Virtual Desktop, see [network topology and connectivity for Virtual Desktop](./eslz-network-topology-and-connectivity.md). -*Download a [Visio file](https://github.com/Azure/avdaccelerator/blob/main/workload/docs/diagrams/avd-accelerator-enterprise-scale-alz-architecture.vsdx) of this architecture.* +_Download a [Visio file](https://github.com/microsoft/CloudAdoptionFramework/raw/main/ready/accelerator-baseline-architecture.vsdx) of this architecture._ ### Guidance for regional expansion -While having an Azure Virtual Desktop deployment in a single Azure region will be enough for many customers, some customers may require expanding their Azure Virtual Desktop deployment to another Azure region. A couple of reasons that would require a customer to expand their Azure Virtual Desktop deployment across Azure regions include: +Although having an Azure Virtual Desktop deployment in a single Azure region is enough for many customers, some customers might require expanding their Azure Virtual Desktop deployment to another Azure region. A couple of reasons that would require a customer to expand their Azure Virtual Desktop deployment across Azure regions include: -- **Scenario A:** Customer requires to deploy additional Azure Virtual Desktop Virtual Machines, but there is no additional capacity in the existing Azure region. +- **Scenario A:** Customer requires to deploy additional Azure Virtual Desktop Virtual Machines, but there's no more capacity in the existing Azure region. - **Scenario B:** Customers have a need to deploy Azure Virtual Desktop Virtual Machines closer to where their users and on-premises datacenters are located. @@ -60,25 +60,25 @@ The following list describes the key networking considerations to implement in t - Deploy a new Virtual Network with non-overlapping IP address space. - Connect the Virtual Network in the new region to the Virtual Network in the primary region with Global VNet Peering and enabling Gateway Transit. -- Enabling Gateway Transit is important, as that will ensure that the Virtual Network in the new region can access on-premises resources via VPN or ExpressRoute with Private Peering. +- Enabling Gateway Transit is important, as that ensures that the Virtual Network in the new region can access on-premises resources via VPN or ExpressRoute with Private Peering. - Deploy the storage solution required to store user’s profiles. - (Optional) Deploy a Domain Controller in the Virtual Network in the new region. - Configure internet outbound connectivity in the Virtual Network in the new region with either NSG or NVA/Azure Firewall. - Deploy Azure Virtual Desktop Virtual Machines in the new Azure region -- Ensure users are assigned to Windows Virtual Desktops in only one region, to ensure they don’t have different profiles (if users are assigned to Virtual Desktops on both regions, then they will have different profiles, as profiles will be stored in the regional storage system). +- Ensure users are assigned to Windows Virtual Desktops in only one region, to ensure they don’t have different profiles (if users are assigned to Virtual Desktops on both regions, then they'll have different profiles, as profiles are stored in the regional storage system). The following list describes the key networking considerations to implement in the new Azure region(s) when expanding an Azure Virtual Desktop deployment into a secondary Azure region that will be connected to an on-premises datacenter in the same geo for **Scenario B:** -Some customers may require deploying Azure Virtual Desktop across multiple Azure regions, as they may want to deploy the Azure Virtual Desktop Virtual Machines closer to where the users are, but also, closer to where the existing systems and applications exists in on-premises datacenters. +Some customers should deploy Azure Virtual Desktop across multiple Azure regions, as they might want to deploy the Azure Virtual Desktop Virtual Machines closer to where the users are, but also, closer to where the existing systems and applications exist in on-premises datacenters. - Deploy a new Virtual Network with non-overlapping IP address space. - Connect the Virtual Network in the new region to on-premises datacenter by using VPN or ExpressRoute with Private Peering. -- This connectivity will ensure Azure Virtual Desktop users have access to resources located in on-premises datacenters in their region. -- Deploy the storage solution required to store user’s profiles. +- This connectivity ensures Azure Virtual Desktop users have access to resources located in on-premises datacenters in their region. +- Deploy the storage solution required to store user's profiles. - (Optional) Deploy a Domain Controller in the Virtual Network in the new region. - Configure internet outbound connectivity in the Virtual Network in the new region with either NSG or NVA/Azure Firewall - Deploy Azure Virtual Desktop Virtual Machines in the new Azure region -- Ensure users are assigned to Windows Virtual Desktops in only one region, to ensure they don’t have different profiles (if users are assigned to Virtual Desktops on both regions, then they will have different profiles, as profiles will be stored in the regional storage system). +- Ensure users are assigned to Windows Virtual Desktops in only one region, to ensure they don't have different profiles (if users are assigned to Virtual Desktops on both regions, then they'll have different profiles, since profiles are stored in the regional storage system). ## Deploy Azure Virtual Desktop with the landing zone accelerator @@ -86,7 +86,7 @@ The Azure Virtual Desktop landing zone accelerator includes an open-source colle The Azure Virtual Desktop accelerator is available in the [Azure Virtual Desktop accelerator](https://github.com/Azure/avdaccelerator) GitHub repository. It contains Infrastructure as Code based on [Common Azure Resource Modules Library (CARML)](https://github.com/Azure/ResourceModules). The Azure Virtual Desktop landing zone accelerator ([deployment prerequisites](https://github.com/Azure/avdaccelerator/blob/main/workload/docs/getting-started-baseline.md)) can be deployed using integration into your CI/CD pipelines, command line [PowerShell or Azure CLI](https://github.com/Azure/avdaccelerator/tree/main/workload/bicep) or Azure portal deployments: -**Optional: Custom Image Build:** +**(Optional) Custom Image Build:** Deploy a custom image based on the latest version of the Azure Marketplace image to an Azure Compute Gallery. [![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#blade/Microsoft_Azure_CreateUIDef/CustomDeploymentBlade/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2Favdaccelerator%2Fmain%2Fworkload%2Farm%2Fdeploy-custom-image.json/uiFormDefinitionUri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2Favdaccelerator%2Fmain%2Fworkload%2Fportal-ui%2Fportal-ui-custom-image.json) diff --git a/docs/scenarios/azure-virtual-desktop/index.md b/docs/scenarios/azure-virtual-desktop/index.md index bc9432230c..f78f21562f 100644 --- a/docs/scenarios/azure-virtual-desktop/index.md +++ b/docs/scenarios/azure-virtual-desktop/index.md @@ -23,7 +23,7 @@ This scenario is designed to guide the end-to-end customer journey, throughout t ## Common customer journeys -- **Azure Virtual Desktop reference architecture:** The [reference architecture](./media/azure-virtual-desktop-architecture.png) demonstrates how to deploy a proven architecture for Azure Virtual Desktop in your environment. This architecture is a suggested starting point for Azure Virtual Desktop. +- **Azure Virtual Desktop reference architecture:** The [Azure Virtual Desktop reference architecture](./enterprise-scale-landing-zone.md) demonstrates how to deploy a proven architecture for Azure Virtual Desktop in your environment. This architecture is a suggested starting point for Azure Virtual Desktop. - **Migrate existing virtual desktops to Azure:** A common use case for Azure Virtual Desktop is to modernize an existing virtual desktop environment. While the process can vary, there are several components to a successful migration, like session hosts, user profiles, images, and applications. If you're migrating existing VMs, you can review articles on migration to learn how tools like [Azure Migrate](/azure/migrate/migrate-services-overview) can speed up your migration as part of a standard migration process. However, your migration might consist of bringing your golden image into Azure and provisioning a new Azure Virtual Desktop host pool with new session hosts. You can migrate your existing user profiles into Azure and build new host pools and session hosts as well. A final migration scenario might include migrating your applications into MSIX app attach format. For all of these migration scenarios, you need to provision a new host pool because there's currently no direct migration of other virtual desktop infrastructure (VDI) solutions into Azure Virtual Desktop. diff --git a/docs/scenarios/azure-virtual-desktop/media/accelerator-baseline-architecture.svg b/docs/scenarios/azure-virtual-desktop/media/accelerator-baseline-architecture.svg new file mode 100644 index 0000000000..9b7be69a89 --- /dev/null +++ b/docs/scenarios/azure-virtual-desktop/media/accelerator-baseline-architecture.svg @@ -0,0 +1,46401 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Page-1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Belt + + + + + + + + + + + + + + + + Sheet.3613 + + Sheet.3614 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.3615 + + Sheet.3616 + + + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.3606 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.3601 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.7770 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.1077 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.1846 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.3003 + + + + + + + + + + + + + + + + + + + + + + + Sheet.10 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.11 + Customer network + + + + + + + Customer network + + Sheet.12 + + + + + + + + + + Sheet.13 + + + + + Sheet.14 + + rect2.5998 + + + + + + + path14.5999 + + + + + + + + + + + Sheet.17 + + rect2.5998 + + + + + + + path14.5999 + + + + + + + + + + + Sheet.20 + + rect2.5998 + + + + + + + path14.5999 + + + + + + + + + + + + + + + + + + + + + 1ES CloudTest Account.7601 + + Sheet.24 + + Sheet.25 + + + + Sheet.26 + + + + Sheet.27 + + + + Sheet.28 + + + + Sheet.29 + + + + + + + Sheet.30 + + + + + + + Dynamic connector.7619 + + + + + + Sheet.32 + HTML5, Windows, Mac, iOS, Android, and Linux + + + + + + + HTML5, Windows, Mac, iOS, Android, and Linux + + Rounded Rectangle.7690 + + + + + + + + + + + + + + + + + + + + + + + Sheet.34 + Non-corporate network + + + + + + + Non-corporate network + + + + + Sheet.35 + + + + + Sheet.36 + + rect2.5998 + + + + + + + path14.5999 + + + + + + + + + + + Sheet.39 + + rect2.5998 + + + + + + + path14.5999 + + + + + + + + + + + Sheet.42 + + rect2.5998 + + + + + + + path14.5999 + + + + + + + + + + + + + + + + + + + + + 1ES CloudTest Account.7601 + + Sheet.46 + + Sheet.47 + + + + Sheet.48 + + + + Sheet.49 + + + + Sheet.50 + + + + Sheet.51 + + + + + + + Sheet.52 + HTML5, Windows, Mac, iOS, Android, and Linux + + + + + + + HTML5, Windows, Mac, iOS, Android, and Linux + + Rounded Rectangle.7762 + + + + + + + + + + + + + + + + + + + + + + + + + + layer1 + + circle19 + + + + circle21 + + + + path23 + + + + + Sheet.58 + Virtual Desktop control plane + + + + + + + Virtual Desktop control plane + + + + + Sheet.59 + + + + + + Sheet.60 + + Sheet.61 + + + + Sheet.62 + + + + Sheet.63 + + + + Sheet.64 + + + + Sheet.65 + + + + Sheet.66 + + + + Sheet.67 + + + + + Sheet.68 + Microsoft Entra tenant + + + + + + + Microsoft Entra tenant + + Dynamic connector.7785 + + + + + + + Dynamic connector.7786 + + + + + + + Rounded Rectangle.7790 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Subscription.4135 + + Sheet.73 + + Sheet.74 + + + + Sheet.75 + + + + + + Sheet.76 + Connectivity subscription + + + + + + + Connectivity subscription + + + + + Sheet.77 + + Sheet.78 + Internet + + + + + + + Internet + + Sheet.79 + + + + + + + + + + + Sheet.80 + + + + + Sheet.81 + + Sheet.82 + + Icon-databases-136.149 + + path4-5 + + Sheet.85 + + Sheet.86 + + + + + + path6-7 + + Sheet.88 + + Sheet.89 + + + + + + circle8-5 + + Sheet.91 + + Sheet.92 + + + + + + circle10-2 + + Sheet.94 + + Sheet.95 + + + + + + + + Sheet.96 + + Sheet.97 + + Sheet.98 + + + + + Sheet.99 + + Sheet.100 + + + + + + + Sheet.101 + AD DS server + + + + + + + AD DSserver + + + Sheet.102 + Microsoft Entra Connect Sync/Cloud sync + + + + + + + Microsoft Entra Connect Sync/Cloud sync + + + + + Sheet.103 + + + + + Sheet.104 + + Icon-databases-136.149 + + path4-5 + + Sheet.107 + + Sheet.108 + + + + + + path6-7 + + Sheet.110 + + Sheet.111 + + + + + + circle8-5 + + Sheet.113 + + Sheet.114 + + + + + + circle10-2 + + Sheet.116 + + Sheet.117 + + + + + + + + + + + Sheet.118 + + Sheet.119 + + + + Sheet.120 + + + + + + + + + Sheet.121 + + + + + + + + + + + + + + + Route Server.1287 + + Sheet.123 + + Sheet.124 + + + + Sheet.125 + + + + Sheet.126 + + + + + + Sheet.127 + Gateway + + + + + + + Gateway + + + Dynamic connector.1384 + + + + + + + Rounded Rectangle.1404 + + + + + + + + + + + + + + + + + + + + + + + Dynamic connector.1405 + + + + + + + + + + Sheet.131 + + + + + + + + + + + + + + + Virtual Network Gateway.1385 + + Icon-networking-63 + + Sheet.134 + + + + Sheet.135 + + + + Sheet.136 + + + + Sheet.137 + + + + + + Sheet.138 + Gateway + + + + + + + Gateway + + + + + + + + + + + + + + + + Virtual Network.4208 + + Sheet.140 + + Sheet.141 + + + + Sheet.142 + + + + Sheet.143 + + + + Sheet.144 + + + + Sheet.145 + + + + + + + + + Sheet.146 + + + + + + + + + + + + + + + Azure Firewall.3462 + + layer1 + + path4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + path14 + + + + path16 + + + + path18 + + + + path20 + + + + path22 + + + + + + Sheet.159 + Azure Firewall/NVA + + + + + + + Azure Firewall/NVA + + + + + + + + + + + + + + + + Network Watcher.3937 + Network Watcher + + Icon-networking-66 + + Sheet.162 + + + + Sheet.163 + + + + Sheet.164 + + + + Sheet.165 + + + + Sheet.166 + + + + + + + Network Watcher + + + + + + + + + + + + + + + + Role.4046 + Role entitlement + + g16 + + path2 + + + + path4 + + + + path8 + + + + path10 + + + + path12 + + + + + + + Role entitlement + + + + + + + + + + + + + + + + Security Center.4069 + Security Center + + Sheet.175 + + Sheet.176 + + + + Sheet.177 + + + + Sheet.178 + + + + + + + Security Center + + + + + + + + + + + + + + + + Policy.1394 + Policy assignment + + ellipse17 + + + + ellipse19 + + + + ellipse21 + + + + ellipse23 + + + + ellipse25 + + + + ellipse27 + + + + path29 + + + + path31 + + + + path33 + + + + + + Policy assignment + + + + + + + + + + + + + + + + DDoS Protection.3671 + DDoS Protection + + g20 + + path2 + + + + path4 + + + + path6 + + + + ellipse8 + + + + path10 + + + + ellipse12 + + + + path14 + + + + ellipse16 + + + + path18 + + + + path4-0 + + + + rect45 + + + + rect45-7 + + + + rect45-7-8 + + + + rect45-78 + + + + rect45-7-2 + + + + rect45-7-8-8 + + + + + + + DDoS Protection + + + Rounded Rectangle.1459 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Subscription.1460 + + Sheet.209 + + Sheet.210 + + + + Sheet.211 + + + + + + Sheet.212 + Management subscription + + + + + + + Management subscription + + + + + + + + + + + + + + + Role.1508 + Role entitlement + + g16 + + path2 + + + + path4 + + + + path8 + + + + path10 + + + + path12 + + + + + + + Role entitlement + + + + + + + + + + + + + + + + Security Center.1515 + Security Center + + Sheet.221 + + Sheet.222 + + + + Sheet.223 + + + + Sheet.224 + + + + + + + Security Center + + + + + + + + + + + + + + + + Policy.1520 + Policy assignment + + ellipse17 + + + + ellipse19 + + + + ellipse21 + + + + ellipse23 + + + + ellipse25 + + + + ellipse27 + + + + path29 + + + + path31 + + + + path33 + + + + + + Policy assignment + + + + + + + + + + + + + + + + Azure Monitor.3495 + Azure Monitor + + g16 + + ellipse2 + + + + ellipse4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + ellipse14 + + + + + + + Azure Monitor + + + + + + + + + + + + + + + + Azure Monitor.1580 + Azure Monitor + + g16 + + ellipse2 + + + + ellipse4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + ellipse14 + + + + + + + Azure Monitor + + + + + + Sheet.253 + + + + + Sheet.254 + + Icon-databases-136.149 + + path4-5 + + Sheet.257 + + Sheet.258 + + + + + + path6-7 + + Sheet.260 + + Sheet.261 + + + + + + circle8-5 + + Sheet.263 + + Sheet.264 + + + + + + circle10-2 + + Sheet.266 + + Sheet.267 + + + + + + + + Sheet.268 + Custom DNS server 1 + + + + + + + Custom DNS server 1 + + + + + + + + + + + + + + + DNS Zone (Private).1649 + + Icon-networking-64 + + Sheet.271 + + + + Sheet.272 + + + + Sheet.273 + + + + + + + + + + Sheet.274 + + + + + + + + + + + + + + + DNS Zone (Private).3731 + + Icon-networking-64 + + Sheet.277 + + + + Sheet.278 + + + + Sheet.279 + + + + + + Sheet.280 + Private DNS zone + + + + + + + Private DNS zone + + + + + + Sheet.281 + + + + + Sheet.282 + + Icon-databases-136.149 + + path4-5 + + Sheet.285 + + Sheet.286 + + + + + + path6-7 + + Sheet.288 + + Sheet.289 + + + + + + circle8-5 + + Sheet.291 + + Sheet.292 + + + + + + circle10-2 + + Sheet.294 + + Sheet.295 + + + + + + + + Sheet.296 + Custom DNS server 2 + + + + + + + Custom DNS server 2 + + + + + + + + + + + + + + + DNS Zone (Private).1649 + + Icon-networking-64 + + Sheet.299 + + + + Sheet.300 + + + + Sheet.301 + + + + + + + Rounded Rectangle.1721 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Subscription.1722 + + Sheet.304 + + Sheet.305 + + + + Sheet.306 + + + + + + Sheet.307 + Identity subscription + + + + + + + Identity subscription + + Rounded Rectangle.1727 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Virtual Network.1728 + + Sheet.310 + + Sheet.311 + + + + Sheet.312 + + + + Sheet.313 + + + + Sheet.314 + + + + Sheet.315 + + + + + + + + + + + + + + + + + + + Network Watcher.1741 + Network Watcher + + Icon-networking-66 + + Sheet.318 + + + + Sheet.319 + + + + Sheet.320 + + + + Sheet.321 + + + + Sheet.322 + + + + + + + Network Watcher + + + + + + + + + + + + + + + + Role.1748 + Role entitlement + + g16 + + path2 + + + + path4 + + + + path8 + + + + path10 + + + + path12 + + + + + + + Role entitlement + + + + + + + + + + + + + + + + Security Center.1755 + Security Center + + Sheet.331 + + Sheet.332 + + + + Sheet.333 + + + + Sheet.334 + + + + + + + Security Center + + + + + + + + + + + + + + + + Policy.1760 + Policy assignment + + ellipse17 + + + + ellipse19 + + + + ellipse21 + + + + ellipse23 + + + + ellipse25 + + + + ellipse27 + + + + path29 + + + + path31 + + + + path33 + + + + + + Policy assignment + + + + + + + + + + + + + + + + DDoS Protection.1770 + DDoS Protection + + g20 + + path2 + + + + path4 + + + + path6 + + + + ellipse8 + + + + path10 + + + + ellipse12 + + + + path14 + + + + ellipse16 + + + + path18 + + + + path4-0 + + + + rect45 + + + + rect45-7 + + + + rect45-7-8 + + + + rect45-78 + + + + rect45-7-2 + + + + rect45-7-8-8 + + + + + + + DDoS Protection + + + + + + + + + + + + + + + + Azure Monitor.1788 + Azure Monitor + + g16 + + ellipse2 + + + + ellipse4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + ellipse14 + + + + + + + Azure Monitor + + + + + + Sheet.372 + + + + + Sheet.373 + + Sheet.374 + + Icon-databases-136.149 + + path4-5 + + Sheet.377 + + Sheet.378 + + + + + + path6-7 + + Sheet.380 + + Sheet.381 + + + + + + circle8-5 + + Sheet.383 + + Sheet.384 + + + + + + circle10-2 + + Sheet.386 + + Sheet.387 + + + + + + + + Sheet.388 + + Sheet.389 + + Sheet.390 + + + + + Sheet.391 + + Sheet.392 + + + + + + + Sheet.393 + AD DS server 1 + + + + + + + AD DSserver 1 + + + + + + Sheet.394 + + + + + Sheet.395 + + Sheet.396 + + Icon-databases-136.149 + + path4-5 + + Sheet.399 + + Sheet.400 + + + + + + path6-7 + + Sheet.402 + + Sheet.403 + + + + + + circle8-5 + + Sheet.405 + + Sheet.406 + + + + + + circle10-2 + + Sheet.408 + + Sheet.409 + + + + + + + + Sheet.410 + + Sheet.411 + + Sheet.412 + + + + + Sheet.413 + + Sheet.414 + + + + + + + Sheet.415 + AD DS server 2 + + + + + + + AD DSserver 2 + + + + + + + + + + + + + + + + Recovery Services.1841 + Recovery services + + g8 + + path4 + + + + path6 + + + + + + + Recovery services + + + Dynamic connector.1847 + + + + + + + + + + + + + + + + + + + + Virtual Network Peering.4245 + Virtual network peering + + g18 + + path2 + + + + path4 + + + + path6 + + + + path8 + + + + path10 + + + + circle12 + + + + path14 + + + + path16 + + + + + + + Virtual network peering + + + Dynamic connector.1858 + + + + + + + Rounded Rectangle.1933 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.1934 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.1948 + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.435 + + + + + + + + + + + + + + + Log Analytics Workspace.3815 + + Workspaces + + Sheet.438 + + + + Sheet.439 + + + + Sheet.440 + + + + + + Sheet.441 + Azure Monitor Logs workspace + + + + + + + Azure Monitor Logs workspace + + + Sheet.442 + Dashboards Virtual Desktop insights Virtual Desktop workbook ... + + + + + + + · Dashboards· Virtual Desktop insights· Virtual Desktop workbook· Alerting· Queries + + Rounded Rectangle.1949 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Automation Account.1890 + Automation account + + Sheet.445 + + Sheet.446 + + + + Sheet.447 + + + + + + + Automation account + + + Sheet.448 + Update management Inventory management Change tracking + + + + + + + · Update management· Inventory management· Change tracking + + Rounded Rectangle.1951 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Subscription.1952 + + Sheet.451 + + Sheet.452 + + + + Sheet.453 + + + + + + Sheet.454 + Virtual Desktop shared services landing zone subscription + + + + + + + Virtual Desktop shared services landing zone subscription + + + + + + + + + + + + + + + Network Watcher.1993 + Network Watcher + + Icon-networking-66 + + Sheet.457 + + + + Sheet.458 + + + + Sheet.459 + + + + Sheet.460 + + + + Sheet.461 + + + + + + + Network Watcher + + + + + + + + + + + + + + + + Role.2000 + Role entitlement + + g16 + + path2 + + + + path4 + + + + path8 + + + + path10 + + + + path12 + + + + + + + Role entitlement + + + + + + + + + + + + + + + + Security Center.2007 + Security Center + + Sheet.470 + + Sheet.471 + + + + Sheet.472 + + + + Sheet.473 + + + + + + + Security Center + + + + + + + + + + + + + + + + Policy.2012 + Policy assignment + + ellipse17 + + + + ellipse19 + + + + ellipse21 + + + + ellipse23 + + + + ellipse25 + + + + ellipse27 + + + + path29 + + + + path31 + + + + path33 + + + + + + Policy assignment + + + + + + + + + + + + + + + + Azure Monitor.2040 + Azure Monitor + + g16 + + ellipse2 + + + + ellipse4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + ellipse14 + + + + + + + Azure Monitor + + + Rounded Rectangle.2105 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Subscription.2106 + + Sheet.495 + + Sheet.496 + + + + Sheet.497 + + + + + + Sheet.498 + Virtual Desktop landing zone subscription + + + + + + + Virtual Desktop landing zone subscription + + + + + + + + + + + + + + + Network Watcher.2147 + Network Watcher + + Icon-networking-66 + + Sheet.501 + + + + Sheet.502 + + + + Sheet.503 + + + + Sheet.504 + + + + Sheet.505 + + + + + + + Network Watcher + + + + + + + + + + + + + + + + Role.2154 + Role entitlement + + g16 + + path2 + + + + path4 + + + + path8 + + + + path10 + + + + path12 + + + + + + + Role entitlement + + + + + + + + + + + + + + + + Security Center.2161 + Security Center + + Sheet.514 + + Sheet.515 + + + + Sheet.516 + + + + Sheet.517 + + + + + + + Security Center + + + + + + + + + + + + + + + + Policy.2166 + Policy assignment + + ellipse17 + + + + ellipse19 + + + + ellipse21 + + + + ellipse23 + + + + ellipse25 + + + + ellipse27 + + + + path29 + + + + path31 + + + + path33 + + + + + + Policy assignment + + + + + + + + + + + + + + + + Azure Monitor.2194 + Azure Monitor + + g16 + + ellipse2 + + + + ellipse4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + ellipse14 + + + + + + + Azure Monitor + + + + + + + + + + + + + + + + Virtual Network Peering.2260 + Virtual network peering + + g18 + + path2 + + + + path4 + + + + path6 + + + + path8 + + + + path10 + + + + circle12 + + + + path14 + + + + path16 + + + + + + + Virtual network peering + + + Dynamic connector.2270 + + + + + + + + + + + + + + + + + + + + Key Vault.2271 + Key Vault + + Sheet.550 + + Sheet.551 + + + + Sheet.552 + + + + Sheet.553 + + + + Sheet.554 + + + + Sheet.555 + + + + Sheet.556 + + + + + + + Key Vault + + + + + + + + + + + + + + + + Key Vault.2279 + Key Vault + + Sheet.558 + + Sheet.559 + + + + Sheet.560 + + + + Sheet.561 + + + + Sheet.562 + + + + Sheet.563 + + + + Sheet.564 + + + + + + + Key Vault + + + + + + + + + + + + + + + + Recovery Services.2295 + Recovery services + + g8 + + path4 + + + + path6 + + + + + + + Recovery services + + + + + + + + + + + + + + + + Image Template.3791 + Image template + + layer1 + + path2 + + + + rect4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + path14 + + + + path16 + + + + path18 + + + + + + + Image template + + + Sheet.587 + Region A + + + + + + + Region A + + Sheet.588 + Region A + + + + + + + Region A + + Sheet.589 + Region A + + + + + + + Region A + + Sheet.590 + Region A + + + + + + + Region A + + Sheet.591 + Region A + + + + + + + Region A + + Rounded Rectangle.2362 + + + + + + + + + + + + + + + + + + + + + + + Sheet.593 + Virtual Desktop scale unit module + + + + + + + Virtual Desktop scale unit module + + + + + + + + + + + + + + + Workspace.2417 + + Sheet.595 + + + + Sheet.596 + + + + Sheet.597 + + Sheet.598 + + + + + Sheet.599 + + + + + Rounded Rectangle.2449 + + + + + + + + + + + + + + + + + + + + + + + + + + layer1.2450 + + circle19 + + + + circle21 + + + + path23 + + + + + Sheet.605 + Virtual Desktop management plane + + + + + + + Virtual Desktop management plane + + Dynamic connector.2457 + + + + + + + + + + + + + + + + + + + + Extension.3757 + Extension + + g10 + + path4 + + + + path6 + + + + path8 + + + + + + + Extension + + + Dynamic connector.2597 + + + + + + + Rounded Rectangle.615 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Azure Compute Gallery.616 + Compute Gallery + + Sheet.617 + + Sheet.618 + + + + Sheet.619 + + + + Sheet.620 + + + + Sheet.621 + + + + Sheet.622 + + + + Sheet.623 + + + + Sheet.624 + + + + + + + ComputeGallery + + + + + + + + + + + + + + + + VM Image Definition.625 + VM image definition + + Sheet.626 + + Sheet.627 + + + + Sheet.628 + + + + Sheet.629 + + + + Sheet.630 + + + + Sheet.631 + + + + Sheet.632 + + + + Sheet.633 + + + + Sheet.634 + + + + + + + VM image definition + + + Dynamic connector.635 + + + + + + + Dynamic connector.2605 + + + + + + + Dynamic connector.959 + + + + + + + Rounded Rectangle.1020 + + + + + + + + + + + + + + + + + + + + + + + Sheet.639 + Legend + + + + + + + Legend + + Dynamic connector.1022 + + + + + + + Dynamic connector.1025 + + + + + + + Sheet.642 + Microsoft 365 and internet traffic + + + + + + + Microsoft 365 and internet traffic + + Sheet.643 + Virtual Desktop scale unit module + + + + + + + Virtual Desktop scale unit module + + Sheet.644 + Virtual Desktop internal traffic + + + + + + + Virtual Desktop internal traffic + + Dynamic connector.1029 + + + + + + + Sheet.646 + Virtual Desktop external traffic + + + + + + + Virtual Desktop external traffic + + Dynamic connector.657 + + + + + + + Sheet.648 + Network-to-network peering traffic + + + + + + + Network-to-network peering traffic + + Rounded Rectangle.1034 + + + + + + + + + + + + + + + + + + + + + + + Sheet.650 + Virtual Machine Scale Sets Flex across availability zones or ... + + + + + + + Virtual Machine Scale Sets Flex across availability zones or availability-zone-aware SKUs for PaaS services + + Dynamic connector.1036 + + + + + + + Sheet.652 + Private endpoint connection + + + + + + + Private endpoint connection + + Dynamic connector.1039 + + + + + + + Sheet.654 + Microsoft Entra Connect traffic + + + + + + + Microsoft Entra Connect traffic + + Dynamic connector.1041 + + + + + + + Sheet.656 + ExpressRoute or site-to-site VPN connection + + + + + + + ExpressRoute or site-to-site VPN connection + + Sheet.657 + + + + + + + + + Sheet.658 + VM Image Builder + + + + + + + VM Image Builder + + Dynamic connector.1046 + + + + + + + Dynamic connector.1047 + + + + + + + Sheet.661 + Internal service component interaction + + + + + + + Internal service component interaction + + + + + + + + + + + + + + + ExpressRoute Circuit.3746 + + Icon-networking-79 + + Sheet.665 + + + + Sheet.666 + + + + Sheet.667 + + + + Sheet.668 + + + + Sheet.669 + + + + + + Sheet.670 + ExpressRoute circuit + + + + + + + ExpressRoutecircuit + + Sheet.671 + Site-to-site VPN + + + + + + + Site-to-site VPN + + Rounded Rectangle.1057 + + + + + + + + + + + + + + + + + + + + + + + Dynamic connector.1059 + + + + + + + Dynamic connector.1066 + + + + + + + + + + + + + + + + + + + + WVD Host Pool.1067 + Host pool + + HostPools + + Sheet.677 + + + + Sheet.678 + + + + Sheet.679 + + + + Sheet.680 + + + + Sheet.681 + + + + Sheet.682 + + + + + + + Host pool + + + Dynamic connector.1097 + + + + + + + + + + + + + + + + + + + + WVD RDP Property.1098 + Windows Virtual Desktop RDP property + + MsPortalFx.base.images-29 + + Sheet.686 + + + + Sheet.687 + + + + Sheet.688 + + + + Sheet.689 + + + + Sheet.690 + + + + Sheet.691 + + + + Sheet.692 + + + + Sheet.693 + + + + Sheet.694 + + + + + + + Windows VirtualDesktop RDPproperty + + + + + + Sheet.695 + + Rounded Rectangle.1054 + + + + + + + + + + + + + + + + + + + + + + + Sheet.697 + Start VM on connect + + + + + + + Start VM on connect + + + Dynamic connector.713 + + + + + + + Dynamic connector.714 + + + + + + + Sheet.700 + Workspace + + + + + + + Workspace + + + + + Sheet.701 + + + + + + + + + + + + + + + Application Group.1062 + + Application Group + + Sheet.704 + + + + Sheet.705 + + + + + + Sheet.706 + Application group + + + + + + + Applicationgroup + + + + + + Sheet.707 + + + + + + + + + + + + + + + Scaling Plan.4064 + Virtual Desktop scaling plan + + g12 + + path4 + + + + path6 + + + + path8 + + + + + + + Virtual Desktopscaling plan + + + + + + Sheet.713 + + Sheet.714 + + + + + + + + + Sheet.715 + Schedules + + + + + + + Schedules + + + Rounded Rectangle.2387 + + + + + + + + + + + + + + + + + + + + + + + Dynamic connector.2602 + + + + + + + + Rounded Rectangle.1121 + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.719 + + + + + Sheet.720 + + + + + + + + + + + + + + + Application Group.3156 + + Application Group + + Sheet.723 + + + + Sheet.724 + + + + + + + + + + + + + + + + + + + WVD Host Pool.4292 + Host pool + + HostPools + + Sheet.727 + + + + Sheet.728 + + + + Sheet.729 + + + + Sheet.730 + + + + Sheet.731 + + + + Sheet.732 + + + + + + + Host pool + + + + + + + + + + + + + + + + WVD RDP Property.2406 + Windows Virtual Desktop RDP property + + MsPortalFx.base.images-29 + + Sheet.735 + + + + Sheet.736 + + + + Sheet.737 + + + + Sheet.738 + + + + Sheet.739 + + + + Sheet.740 + + + + Sheet.741 + + + + Sheet.742 + + + + Sheet.743 + + + + + + + Windows VirtualDesktop RDPproperty + + + Dynamic connector.2455 + + + + + + + Dynamic connector.2456 + + + + + + + + + + Sheet.746 + + Rounded Rectangle.1054 + + + + + + + + + + + + + + + + + + + + + + + Sheet.748 + Start VM on connect + + + + + + + Start VM on connect + + + Dynamic connector.1061 + + + + + + + + Sheet.750 + Application group + + + + + + + Applicationgroup + + + Sheet.751 + Personal pool + + + + + + + Personal pool + + Rounded Rectangle.1124 + + + + + + + + + + + + + + + + + + + + + + + Sheet.753 + Pooled pool + + + + + + + Pooled pool + + Dynamic connector.2603 + + + + + + + Rounded Rectangle.1231 + + + + + + + + + + + + + + + + + + + + + + + Sheet.814 + Virtual Desktop personal host pool + + + + + + + Virtual Desktop personal host pool + + Rounded Rectangle.1233 + + + + + + + + + + + + + + + + + + + + + + + Sheet.816 + Virtual Desktop pooled host pool + + + + + + + Virtual Desktop pooled host pool + + Dynamic connector.1247 + + + + + + + Sheet.818 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.819 + + Sheet.820 + + + + + + + Sheet.821 + VPN + + + + + + + VPN + + + Rounded Rectangle.1275 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.1277 + + + + + + + + + + + + + + + + + + + + + + + Sheet.827 + Virtual network subnet + + + + + + + Virtual network subnet + + Rounded Rectangle.1279 + + + + + + + + + + + + + + + + + + + + + + + Sheet.829 + DNS subnet + + + + + + + DNS subnet + + Sheet.830 + AD DS subnet + + + + + + + AD DS subnet + + + + + + + + + + + + + + + Network Security Group.1735 + + + + + + + + + + + + + + + + Route Table.4053 + + Icon-networking-82 + + Sheet.834 + + + + Sheet.835 + + + + Sheet.836 + + + + Sheet.837 + + + + + + + + + + + + + + + + + + + Network Security Group.1297 + + + + + + + + + + + + + + + + Route Table.1302 + + Icon-networking-82 + + Sheet.841 + + + + Sheet.842 + + + + Sheet.843 + + + + Sheet.844 + + + + + + + + + + + + + + + + + + + Network Security Group.1016 + + Icon-networking-67 + + Sheet.849 + + + + Sheet.850 + + + + Sheet.851 + + + + Sheet.852 + + + + + + + + + + + + + + + + + + + Network Security Group.1022 + + Icon-networking-67 + + Sheet.855 + + + + Sheet.856 + + + + Sheet.857 + + + + Sheet.858 + + + + + + Dynamic connector.2386 + + + + + + + Rounded Rectangle.2385 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + File Share.3762 + File share + + g16 + + path2 + + + + circle4 + + + + circle6 + + + + circle8 + + + + path10 + + + + path12 + + + + path14 + + + + + + + File share + + + + + + + + + + + + + + + + Storage Account.4113 + Storage account + + Sheet.886 + + Sheet.887 + + + + Sheet.888 + + + + Sheet.889 + + + + Sheet.890 + + + + Sheet.891 + + + + + + + Storage account + + + Sheet.892 + MSIX App Attach + + + + + + + MSIX App Attach + + Dynamic connector.716 + + + + + + + Rounded Rectangle.699 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + File Share.700 + File share + + g16 + + path2 + + + + circle4 + + + + circle6 + + + + circle8 + + + + path10 + + + + path12 + + + + path14 + + + + + + + File share + + + + + + + + + + + + + + + + Storage Account.709 + Storage accounts + + Sheet.906 + + Sheet.907 + + + + Sheet.908 + + + + Sheet.909 + + + + Sheet.910 + + + + Sheet.911 + + + + + + + Storage accounts + + + Sheet.912 + FSLogix + + + + + + + FSLogix + + Rounded Rectangle.1073 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Key Vault.1074 + Key Vault + + Sheet.915 + + Sheet.916 + + + + Sheet.917 + + + + Sheet.918 + + + + Sheet.919 + + + + Sheet.920 + + + + Sheet.921 + + + + + + + Key Vault + + + + + + Sheet.922 + + Sheet.923 + Web access + + + + + + + Web access + + + + + Sheet.924 + + Sheet.925 + + + + + + + Sheet.926 + + + + + + + + + + + + Sheet.928 + + Sheet.929 + + + + + + + + + + Sheet.930 + + Sheet.931 + + + + Sheet.932 + + + + Sheet.933 + + + + + Sheet.934 + + + + + + + + Sheet.935 + + + + + + + Sheet.936 + + + + + + + Sheet.937 + + + + + + + Sheet.938 + + + + + + + Sheet.939 + + + + + + + Sheet.940 + + + + + + + Sheet.941 + + + + + + + Sheet.943 + Connection broker + + + + + + + Connection broker + + + + + + Sheet.944 + + + + + Sheet.945 + + Sheet.946 + + + + Sheet.947 + + + + Sheet.948 + + + + + Sheet.949 + Gateway + + + + + + + Gateway + + + Dynamic connector.2024 + + + + + + + B_Line-03 .2025 + + + + + + + + B_Line-03 .2026 + + + + + + + + Dynamic connector.1289 + + + + + + + Sheet.1080 + + + + + + + Dynamic connector.1294 + + + + + + + Dynamic connector.1295 + + + + + + + Rounded Rectangle.1526 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Subscription.1527 + + Sheet.1528 + + Sheet.1529 + + + + Sheet.1530 + + + + + + Sheet.1531 + Connectivity subscription + + + + + + + Connectivity subscription + + Rounded Rectangle.1532 + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.1533 + + + + + + + + + + + + + + + Virtual Network Gateway.1385 + + Icon-networking-63 + + Sheet.1536 + + + + Sheet.1537 + + + + Sheet.1538 + + + + Sheet.1539 + + + + + + Sheet.1540 + Gateway + + + + + + + Gateway + + + + + + + + + + + + + + + + Virtual Network.1541 + + Sheet.1542 + + Sheet.1543 + + + + Sheet.1544 + + + + Sheet.1545 + + + + Sheet.1546 + + + + Sheet.1547 + + + + + + + + + Sheet.1548 + + + + + + + + + + + + + + + Azure Firewall.3462 + + layer1 + + path4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + path14 + + + + path16 + + + + path18 + + + + path20 + + + + path22 + + + + + + Sheet.1561 + Azure Firewall/NVA + + + + + + + Azure Firewall/NVA + + + + + + + + + + + + + + + + Network Watcher.1562 + Network Watcher + + Icon-networking-66 + + Sheet.1564 + + + + Sheet.1565 + + + + Sheet.1566 + + + + Sheet.1567 + + + + Sheet.1568 + + + + + + + Network Watcher + + + + + + + + + + + + + + + + Role.1569 + Role entitlement + + g16 + + path2 + + + + path4 + + + + path8 + + + + path10 + + + + path12 + + + + + + + Role entitlement + + + + + + + + + + + + + + + + Security Center.1576 + Security Center + + Sheet.1577 + + Sheet.1578 + + + + Sheet.1579 + + + + Sheet.1580 + + + + + + + Security Center + + + + + + + + + + + + + + + + Policy.1581 + Policy assignment + + ellipse17 + + + + ellipse19 + + + + ellipse21 + + + + ellipse23 + + + + ellipse25 + + + + ellipse27 + + + + path29 + + + + path31 + + + + path33 + + + + + + Policy assignment + + + + + + + + + + + + + + + + DDoS Protection.1591 + DDoS Protection + + g20 + + path2 + + + + path4 + + + + path6 + + + + ellipse8 + + + + path10 + + + + ellipse12 + + + + path14 + + + + ellipse16 + + + + path18 + + + + path4-0 + + + + rect45 + + + + rect45-7 + + + + rect45-7-8 + + + + rect45-78 + + + + rect45-7-2 + + + + rect45-7-8-8 + + + + + + + DDoS Protection + + + + + + + + + + + + + + + + Azure Monitor.1637 + Azure Monitor + + g16 + + ellipse2 + + + + ellipse4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + ellipse14 + + + + + + + Azure Monitor + + + + + + Sheet.1655 + + + + + Sheet.1656 + + Icon-databases-136.149 + + path4-5 + + Sheet.1659 + + Sheet.1660 + + + + + + path6-7 + + Sheet.1662 + + Sheet.1663 + + + + + + circle8-5 + + Sheet.1665 + + Sheet.1666 + + + + + + circle10-2 + + Sheet.1668 + + Sheet.1669 + + + + + + + + Sheet.1670 + Custom DNS server 1 + + + + + + + Custom DNS server 1 + + + + + + + + + + + + + + + DNS Zone (Private).1649 + + Icon-networking-64 + + Sheet.1673 + + + + Sheet.1674 + + + + Sheet.1675 + + + + + + + + + + Sheet.1683 + + + + + Sheet.1684 + + Icon-databases-136.149 + + path4-5 + + Sheet.1687 + + Sheet.1688 + + + + + + path6-7 + + Sheet.1690 + + Sheet.1691 + + + + + + circle8-5 + + Sheet.1693 + + Sheet.1694 + + + + + + circle10-2 + + Sheet.1696 + + Sheet.1697 + + + + + + + + Sheet.1698 + Custom DNS server 2 + + + + + + + Custom DNS server 2 + + + + + + + + + + + + + + + DNS Zone (Private).1649 + + Icon-networking-64 + + Sheet.1701 + + + + Sheet.1702 + + + + Sheet.1703 + + + + + + + Rounded Rectangle.1704 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Subscription.1705 + + Sheet.1706 + + Sheet.1707 + + + + Sheet.1708 + + + + + + Sheet.1709 + Identity subscription + + + + + + + Identity subscription + + Rounded Rectangle.1710 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Virtual Network.1711 + + Sheet.1712 + + Sheet.1713 + + + + Sheet.1714 + + + + Sheet.1715 + + + + Sheet.1716 + + + + Sheet.1717 + + + + + + + + + + + + + + + + + + + Network Watcher.1718 + Network Watcher + + Icon-networking-66 + + Sheet.1720 + + + + Sheet.1721 + + + + Sheet.1722 + + + + Sheet.1723 + + + + Sheet.1724 + + + + + + + Network Watcher + + + + + + + + + + + + + + + + Role.1725 + Role entitlement + + g16 + + path2 + + + + path4 + + + + path8 + + + + path10 + + + + path12 + + + + + + + Role entitlement + + + + + + + + + + + + + + + + Security Center.1732 + Security Center + + Sheet.1733 + + Sheet.1734 + + + + Sheet.1735 + + + + Sheet.1736 + + + + + + + Security Center + + + + + + + + + + + + + + + + Policy.1737 + Policy assignment + + ellipse17 + + + + ellipse19 + + + + ellipse21 + + + + ellipse23 + + + + ellipse25 + + + + ellipse27 + + + + path29 + + + + path31 + + + + path33 + + + + + + Policy assignment + + + + + + + + + + + + + + + + DDoS Protection.1747 + DDoS Protection + + g20 + + path2 + + + + path4 + + + + path6 + + + + ellipse8 + + + + path10 + + + + ellipse12 + + + + path14 + + + + ellipse16 + + + + path18 + + + + path4-0 + + + + rect45 + + + + rect45-7 + + + + rect45-7-8 + + + + rect45-78 + + + + rect45-7-2 + + + + rect45-7-8-8 + + + + + + + DDoS Protection + + + + + + + + + + + + + + + + Azure Monitor.1765 + Azure Monitor + + g16 + + ellipse2 + + + + ellipse4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + ellipse14 + + + + + + + Azure Monitor + + + + + + Sheet.1774 + + + + + Sheet.1775 + + Sheet.1776 + + Icon-databases-136.149 + + path4-5 + + Sheet.1779 + + Sheet.1780 + + + + + + path6-7 + + Sheet.1782 + + Sheet.1783 + + + + + + circle8-5 + + Sheet.1785 + + Sheet.1786 + + + + + + circle10-2 + + Sheet.1788 + + Sheet.1789 + + + + + + + + Sheet.1790 + + Sheet.1791 + + Sheet.1792 + + + + + Sheet.1793 + + Sheet.1794 + + + + + + + Sheet.1795 + AD DS server 1 + + + + + + + AD DSserver 1 + + + + + + Sheet.1796 + + + + + Sheet.1797 + + Sheet.1798 + + Icon-databases-136.149 + + path4-5 + + Sheet.1801 + + Sheet.1802 + + + + + + path6-7 + + Sheet.1804 + + Sheet.1805 + + + + + + circle8-5 + + Sheet.1807 + + Sheet.1808 + + + + + + circle10-2 + + Sheet.1810 + + Sheet.1811 + + + + + + + + Sheet.1812 + + Sheet.1813 + + Sheet.1814 + + + + + Sheet.1815 + + Sheet.1816 + + + + + + + Sheet.1817 + AD DS server 2 + + + + + + + AD DSserver 2 + + + + + + + + + + + + + + + + Recovery Services.1818 + Recovery Services + + g8 + + path4 + + + + path6 + + + + + + + Recovery Services + + + Dynamic connector.1822 + + + + + + + + + + + + + + + + + + + + Virtual Network Peering.1823 + Virtual network peering + + g18 + + path2 + + + + path4 + + + + path6 + + + + path8 + + + + path10 + + + + circle12 + + + + path14 + + + + path16 + + + + + + + Virtual network peering + + + Dynamic connector.1833 + + + + + + + Rounded Rectangle.1834 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.1835 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.1851 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Subscription.1852 + + Sheet.1853 + + Sheet.1854 + + + + Sheet.1855 + + + + + + Sheet.1856 + Virtual Desktop shared services landing zone subscription + + + + + + + Virtual Desktop shared services landing zone subscription + + + + + + + + + + + + + + + Network Watcher.1857 + Network Watcher + + Icon-networking-66 + + Sheet.1859 + + + + Sheet.1860 + + + + Sheet.1861 + + + + Sheet.1862 + + + + Sheet.1863 + + + + + + + Network Watcher + + + + + + + + + + + + + + + + Role.1864 + Role entitlement + + g16 + + path2 + + + + path4 + + + + path8 + + + + path10 + + + + path12 + + + + + + + Role entitlement + + + + + + + + + + + + + + + + Security Center.1871 + Security Center + + Sheet.1872 + + Sheet.1873 + + + + Sheet.1874 + + + + Sheet.1875 + + + + + + + Security Center + + + + + + + + + + + + + + + + Policy.1876 + Policy assignment + + ellipse17 + + + + ellipse19 + + + + ellipse21 + + + + ellipse23 + + + + ellipse25 + + + + ellipse27 + + + + path29 + + + + path31 + + + + path33 + + + + + + Policy assignment + + + + + + + + + + + + + + + + Azure Monitor.1886 + Azure Monitor + + g16 + + ellipse2 + + + + ellipse4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + ellipse14 + + + + + + + Azure Monitor + + + Rounded Rectangle.1895 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Subscription.1896 + + Sheet.1897 + + Sheet.1898 + + + + Sheet.1899 + + + + + + Sheet.1900 + Virtual Desktop landing zone subscription + + + + + + + Virtual Desktop landing zone subscription + + + + + + + + + + + + + + + Network Watcher.1901 + Network Watcher + + Icon-networking-66 + + Sheet.1903 + + + + Sheet.1904 + + + + Sheet.1905 + + + + Sheet.1906 + + + + Sheet.1907 + + + + + + + Network Watcher + + + + + + + + + + + + + + + + Role.1908 + Role entitlement + + g16 + + path2 + + + + path4 + + + + path8 + + + + path10 + + + + path12 + + + + + + + Role entitlement + + + + + + + + + + + + + + + + Security Center.1915 + Security Center + + Sheet.1916 + + Sheet.1917 + + + + Sheet.1918 + + + + Sheet.1919 + + + + + + + Security Center + + + + + + + + + + + + + + + + Policy.1920 + Policy assignment + + ellipse17 + + + + ellipse19 + + + + ellipse21 + + + + ellipse23 + + + + ellipse25 + + + + ellipse27 + + + + path29 + + + + path31 + + + + path33 + + + + + + Policy assignment + + + + + + + + + + + + + + + + Azure Monitor.1930 + Azure Monitor + + g16 + + ellipse2 + + + + ellipse4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + ellipse14 + + + + + + + Azure Monitor + + + + + + + + + + + + + + + + Virtual Network Peering.1940 + Virtual network peering + + g18 + + path2 + + + + path4 + + + + path6 + + + + path8 + + + + path10 + + + + circle12 + + + + path14 + + + + path16 + + + + + + + Virtual network peering + + + Dynamic connector.1950 + + + + + + + + + + + + + + + + + + + + Key Vault.1951 + Key Vault + + Sheet.1952 + + Sheet.1953 + + + + Sheet.1954 + + + + Sheet.1955 + + + + Sheet.1956 + + + + Sheet.1957 + + + + Sheet.1958 + + + + + + + Key Vault + + + + + + + + + + + + + + + + Key Vault.1959 + Key Vault + + Sheet.1960 + + Sheet.1961 + + + + Sheet.1962 + + + + Sheet.1963 + + + + Sheet.1964 + + + + Sheet.1965 + + + + Sheet.1966 + + + + + + + Key Vault + + + + + + + + + + + + + + + + Recovery Services.1967 + Recovery services + + g8 + + path4 + + + + path6 + + + + + + + Recovery services + + + + + + + + + + + + + + + + Image Template.1978 + Image template + + layer1 + + path2 + + + + rect4 + + + + path6 + + + + path8 + + + + path10 + + + + path12 + + + + path14 + + + + path16 + + + + path18 + + + + + + + Image template + + + Sheet.1989 + Region B + + + + + + + Region B + + Sheet.1991 + Region B + + + + + + + Region B + + Sheet.1992 + Region B + + + + + + + Region B + + Sheet.1993 + Region B + + + + + + + Region B + + Rounded Rectangle.1994 + + + + + + + + + + + + + + + + + + + + + + + Sheet.1995 + Virtual Desktop scale unit module + + + + + + + Virtual Desktop scale unit module + + + + + + + + + + + + + + + Workspace.1996 + + Sheet.1997 + + + + Sheet.1998 + + + + Sheet.1999 + + Sheet.2000 + + + + + Sheet.2001 + + + + + Rounded Rectangle.2002 + + + + + + + + + + + + + + + + + + + + + + + + + + layer1.2003 + + circle19 + + + + circle21 + + + + path23 + + + + + Sheet.2007 + Virtual Desktop management plane + + + + + + + Virtual Desktop management plane + + Dynamic connector.2008 + + + + + + + + + + + + + + + + + + + + Extension.2010 + Extension + + g10 + + path4 + + + + path6 + + + + path8 + + + + + + + Extension + + + Dynamic connector.2015 + + + + + + + Rounded Rectangle.2387 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Azure Compute Gallery.2375 + Compute Gallery + + Sheet.2019 + + Sheet.2020 + + + + Sheet.2021 + + + + Sheet.2022 + + + + Sheet.2023 + + + + Sheet.2024 + + + + Sheet.2025 + + + + Sheet.2026 + + + + + + + Compute Gallery + + + + + + + + + + + + + + + + VM Image Definition.4277 + VM image definition + + Sheet.2028 + + Sheet.2029 + + + + Sheet.2030 + + + + Sheet.2031 + + + + Sheet.2032 + + + + Sheet.2033 + + + + Sheet.2034 + + + + Sheet.2035 + + + + Sheet.2036 + + + + + + + VM image definition + + + Dynamic connector.2384 + + + + + + + Dynamic connector.2038 + + + + + + + Sheet.2039 + + + + + + + + + Sheet.2040 + VM Image Builder + + + + + + + VM Image Builder + + Dynamic connector.2041 + + + + + + + Dynamic connector.2049 + + + + + + + + + + + + + + + + + + + + WVD Host Pool.2050 + Host pool + + HostPools + + Sheet.2052 + + + + Sheet.2053 + + + + Sheet.2054 + + + + Sheet.2055 + + + + Sheet.2056 + + + + Sheet.2057 + + + + + + + Host pool + + + Dynamic connector.2058 + + + + + + + + + + + + + + + + + + + + WVD RDP Property.2059 + Windows Virtual Desktop RDP property + + MsPortalFx.base.images-29 + + Sheet.2061 + + + + Sheet.2062 + + + + Sheet.2063 + + + + Sheet.2064 + + + + Sheet.2065 + + + + Sheet.2066 + + + + Sheet.2067 + + + + Sheet.2068 + + + + Sheet.2069 + + + + + + + Windows VirtualDesktop RDP property + + + + + + Sheet.2070 + + Rounded Rectangle.1054 + + + + + + + + + + + + + + + + + + + + + + + Sheet.2072 + Start VM on connect + + + + + + + Start VM on connect + + + Dynamic connector.2073 + + + + + + + Dynamic connector.2074 + + + + + + + Sheet.2075 + Workspace + + + + + + + Workspace + + + + + Sheet.2076 + + + + + + + + + + + + + + + Application Group.1062 + + Application Group + + Sheet.2079 + + + + Sheet.2080 + + + + + + Sheet.2081 + Application group + + + + + + + Applicationgroup + + + + + + Sheet.2082 + + + + + + + + + + + + + + + Scaling Plan.4064 + Virtual Desktop Scaling plan + + g12 + + path4 + + + + path6 + + + + path8 + + + + + + + Virtual DesktopScaling plan + + + + + + Sheet.2088 + + Sheet.2089 + + + + + + + + + Sheet.2090 + Schedules + + + + + + + Schedules + + + Rounded Rectangle.2387 + + + + + + + + + + + + + + + + + + + + + + + Dynamic connector.2602 + + + + + + + + Rounded Rectangle.2093 + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.2094 + + + + + Sheet.2095 + + + + + + + + + + + + + + + Application Group.3156 + + Application Group + + Sheet.2098 + + + + Sheet.2099 + + + + + + + + + + + + + + + + + + + WVD Host Pool.4292 + Host pool + + HostPools + + Sheet.2102 + + + + Sheet.2103 + + + + Sheet.2104 + + + + Sheet.2105 + + + + Sheet.2106 + + + + Sheet.2107 + + + + + + + Host pool + + + + + + + + + + + + + + + + WVD RDP Property.2406 + Window Virtual Desktop RDP property + + MsPortalFx.base.images-29 + + Sheet.2110 + + + + Sheet.2111 + + + + Sheet.2112 + + + + Sheet.2113 + + + + Sheet.2114 + + + + Sheet.2115 + + + + Sheet.2116 + + + + Sheet.2117 + + + + Sheet.2118 + + + + + + + Window VirtualDesktop RDP property + + + Dynamic connector.2455 + + + + + + + Dynamic connector.2456 + + + + + + + + + + Sheet.2121 + + Rounded Rectangle.1054 + + + + + + + + + + + + + + + + + + + + + + + Sheet.2123 + Start VM on connect + + + + + + + Start VM on connect + + + Dynamic connector.1061 + + + + + + + + Sheet.2125 + Application group + + + + + + + Applicationgroup + + + Sheet.2126 + Personal pool + + + + + + + Personal pool + + Rounded Rectangle.2127 + + + + + + + + + + + + + + + + + + + + + + + Dynamic connector.2186 + + + + + + + Rounded Rectangle.2191 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.2192 + + + + + + + + + + + + + + + + + + + + + + + Sheet.2193 + DNS subnet + + + + + + + DNS subnet + + Sheet.2194 + AD DS subnet + + + + + + + AD DS subnet + + + + + + + + + + + + + + + Network Security Group.2195 + + + + + + + + + + + + + + + + Route Table.2196 + + Icon-networking-82 + + Sheet.2198 + + + + Sheet.2199 + + + + Sheet.2200 + + + + Sheet.2201 + + + + + + + + + + + + + + + + + + + Network Security Group.2202 + + + + + + + + + + + + + + + + Route Table.2203 + + Icon-networking-82 + + Sheet.2205 + + + + Sheet.2206 + + + + Sheet.2207 + + + + Sheet.2208 + + + + + + + + + + + + + + + + + + + Network Security Group.2211 + + Icon-networking-67 + + Sheet.2213 + + + + Sheet.2214 + + + + Sheet.2215 + + + + Sheet.2216 + + + + + + + + + + + + + + + + + + + Network Security Group.2217 + + Icon-networking-67 + + Sheet.2219 + + + + Sheet.2220 + + + + Sheet.2221 + + + + Sheet.2222 + + + + + + Dynamic connector.2238 + + + + + + + Rounded Rectangle.2239 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + File Share.2240 + File share + + g16 + + path2 + + + + circle4 + + + + circle6 + + + + circle8 + + + + path10 + + + + path12 + + + + path14 + + + + + + + File share + + + + + + + + + + + + + + + + Storage Account.2249 + Storage account + + Sheet.2250 + + Sheet.2251 + + + + Sheet.2252 + + + + Sheet.2253 + + + + Sheet.2254 + + + + Sheet.2255 + + + + + + + Storage account + + + Sheet.2256 + MSIX App Attach + + + + + + + MSIX App Attach + + Dynamic connector.2258 + + + + + + + Rounded Rectangle.2259 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + File Share.2260 + File share + + g16 + + path2 + + + + circle4 + + + + circle6 + + + + circle8 + + + + path10 + + + + path12 + + + + path14 + + + + + + + File share + + + + + + + + + + + + + + + + Storage Account.2269 + Storage accounts + + Sheet.2270 + + Sheet.2271 + + + + Sheet.2272 + + + + Sheet.2273 + + + + Sheet.2274 + + + + Sheet.2275 + + + + + + + Storage accounts + + + Sheet.2276 + FSLogix + + + + + + + FSLogix + + + + + + + + + + + + + + + Key Vault.2277 + Key Vault + + Sheet.2278 + + Sheet.2279 + + + + Sheet.2280 + + + + Sheet.2281 + + + + Sheet.2282 + + + + Sheet.2283 + + + + Sheet.2284 + + + + + + + Key Vault + + + Dynamic connector.2411 + + + + + + + Sheet.2412 + + + + + + + Dynamic connector.2413 + + + + + + + Dynamic connector.2414 + + + + + + + + + + + + + + + + + + + + ExpressRoute Circuit.3467 + + Icon-networking-79 + + Sheet.3469 + + + + Sheet.3470 + + + + Sheet.3471 + + + + Sheet.3472 + + + + Sheet.3473 + + + + + + Sheet.3474 + ExpressRoute circuit + + + + + + + ExpressRoutecircuit + + Sheet.3475 + Site-to-site VPN + + + + + + + Site-to-site VPN + + Rounded Rectangle.3476 + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.3477 + + Sheet.3478 + + + + + + + Sheet.3479 + VPN + + + + + + + VPN + + + Dynamic connector.3481 + + + + + + + Dynamic connector.3482 + + + + + + + Dynamic connector.3485 + + + + + + + Dynamic connector.3488 + + + + + + + + + + + + + + + + + + + + Virtual Network Peering.3489 + Virtual network peering + + g18 + + path2 + + + + path4 + + + + path6 + + + + path8 + + + + path10 + + + + circle12 + + + + path14 + + + + path16 + + + + + + + Virtual network peering + + + Dynamic connector.3499 + + + + + + + Rounded Rectangle.3500 + + + + + + + + + + + + + + + + + + + + + + + Sheet.3501 + Stage description + + + + + + + Stage description + + Sheet.3512 + Fully independent deployment with no dependencies across regi... + + + + + + + · Fully independent deployment with no dependencies across regions.· Identity: A pair of domain controllers for each region.· Name resolution servers: A pair of custom DNS servers for each region.· Azure private DNS zones: These resources are global, so there’s no need to create new zones in the new regions. · Networking hub: Each region has its own network hub that has a virtual network gateway for hybrid connectivity and Azure Firewall or an NVA (when in use). The regions are connected via virtual network peering of network hubs.· Hybrid connectivity: We recommend creating a cross connection of ExpressRoute circuits or site-to-site VPN connections so that each on-premises location is connected to gateways on both regions. · Networking routing: Routing from each region goes through its own hub. If you force traffic through the firewall or NVA, then region spokes force traffic to its local firewall or NVA. Ideally, internet-bound traffic from each region should be allowed to exit from the region.· Virtual Desktop control plane: fully independent deployments of workspaces, host pools, application groups, and scaling plans.· User profiles: Each region has its own Azure Files storage account for FSLogix containers and cloud cache syncs profiles across regions.· MSIX App Attach: Each region has its own Azure Files storage account for MSIX App Attach. Updates to application containers need to be pushed to all regions and kept in sync.· Images: Each region has its own compute gallery. Updates to images need to be pushed to all compute galleries in other regions and kept in sync.· Resiliency: A complete failure of one region doesn’t affect services in the other.· Organizational units (OUs): Each region has its own OU and some registry settings, like FSLogix, cloud cache, and MSIX App Attach, have specific local target values.· Monitoring: One centralized Azure Monitor Logs workspace gathers diagnostics, events, and performance information.· Automation account: One centralized Automation account manages session hosts updates, inventory, and change tracking.· Infrastructure as code: Automation is key to maintain configurations and sync the region’s deployment definitions.· User experience: Users see one published item group and one desktop icon per region. An event can permanently assign or trigger access to published items on regions and create automation for application group assignments. + + Rounded Rectangle.3589 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.3600 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.3602 + + + + + + + + + + + + + + + + + + + + + + + Sheet.3603 + Region A + + + + + + + Region A + + Rounded Rectangle.3604 + + + + + + + + + + + + + + + + + + + + + + + Sheet.3605 + Region B + + + + + + + Region B + + Sheet.3617 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.3618 + + + + + + + + + Sheet.3619 + + + + + + + + + Sheet.3621 + + + + + + + + + Sheet.3622 + + + + + + + + + + + + Sheet.3623 + + Sheet.3624 + Internet + + + + + + + Internet + + Sheet.3625 + + + + + + + + Dynamic connector.3630 + + + + + + + + + + Sheet.3627 + + Sheet.3628 + Internet + + + + + + + Internet + + Sheet.3629 + + + + + + + + Dynamic connector.3630 + + + + + + + + + + + + + + + + + + + + Automation Account.2417 + Automation account + + Sheet.2418 + + Sheet.2419 + + + + Sheet.2420 + + + + + + + Automation account + + + + + + + + + + + + + + + + Automation Account.2421 + Automation account + + Sheet.2422 + + Sheet.2423 + + + + Sheet.2424 + + + + + + + Automation account + + + Rounded Rectangle.1117 + + + + + + + + + + + + + + + + + + + + + + + Rounded Rectangle.3632 + + + + + + + + + + + + + + + + + + + + + + + Dynamic connector.1118 + + + + + + + Sheet.3634 + Virtual Desktop management plane relationship with session ho... + + + + + + + Virtual Desktop management plane relationship with session hosts + + Dynamic connector.1120 + + + + + + + Dynamic connector.3636 + + + + + + + Rounded Rectangle.3826 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Virtual Network.3827 + + Sheet.3647 + + Sheet.3648 + + + + Sheet.3649 + + + + Sheet.3650 + + + + Sheet.3651 + + + + Sheet.3652 + + + + + + + + + + + + + + + + + + + DDoS Protection.3835 + DDoS Protection + + g20 + + path2 + + + + path4 + + + + path6 + + + + ellipse8 + + + + path10 + + + + ellipse12 + + + + path14 + + + + ellipse16 + + + + path18 + + + + path4-0 + + + + rect45 + + + + rect45-7 + + + + rect45-7-8 + + + + rect45-78 + + + + rect45-7-2 + + + + rect45-7-8-8 + + + + + + + DDoS Protection + + + Sheet.3672 + Virtual Desktop subnet + + + + + + + Virtual Desktop subnet + + + + + + + + + + + + + + + Network Security Group.3854 + + + Sheet.3674 + Session host VMs (personal) + + + + + + + Session host VMs (personal) + + Rounded Rectangle.3856 + + + + + + + + + + + + + + + + + + + + + + + Sheet.3676 + Session host VMs (pooled) + + + + + + + Session host VMs (pooled) + + Rounded Rectangle.3858 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Private Endpoint.3859 + + g10 + + path4 + + + + path6 + + + + path8 + + + + + + Rounded Rectangle.3864 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.3865 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.3874 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.3883 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.3892 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + Sheet.3720 + + Rounded Rectangle.1149 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.839 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.848 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.857 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.1203 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + Sheet.3758 + + + + + + + + + + + + + + + Route Table.1335 + + Icon-networking-82 + + Sheet.3761 + + + + Sheet.3762 + + + + Sheet.3763 + + + + Sheet.3764 + + + + + + + + + + + + + + + + + + + Application Security Group.815 + + Icon-networking-83 + + Sheet.3767 + + + + Sheet.3768 + + + + Sheet.3769 + + + + Sheet.3770 + + + + Sheet.3771 + + + + Sheet.3772 + + + + Sheet.3773 + + + + Sheet.3774 + + + + Sheet.3775 + + + + Sheet.3776 + + + + + + + + + + + + + + + + + + + Network Security Group.2127 + + Icon-networking-67 + + Sheet.3779 + + + + Sheet.3780 + + + + Sheet.3781 + + + + Sheet.3782 + + + + + + + + + + Sheet.3783 + + + + + + + + + + + + + + + Route Table.1335 + + Icon-networking-82 + + Sheet.3786 + + + + Sheet.3787 + + + + Sheet.3788 + + + + Sheet.3789 + + + + + + + + + + + + + + + + + + + Application Security Group.815 + + Icon-networking-83 + + Sheet.3792 + + + + Sheet.3793 + + + + Sheet.3794 + + + + Sheet.3795 + + + + Sheet.3796 + + + + Sheet.3797 + + + + Sheet.3798 + + + + Sheet.3799 + + + + Sheet.3800 + + + + Sheet.3801 + + + + + + + + + + + + + + + + + + + Network Security Group.2127 + + Icon-networking-67 + + Sheet.3804 + + + + Sheet.3805 + + + + Sheet.3806 + + + + Sheet.3807 + + + + + + + Sheet.3808 + Private endpoints subnet + + + + + + + Private endpoints subnet + + Rounded Rectangle.3990 + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.3810 + + + + + + + + + + + + + + + Route Table.1335 + + Icon-networking-82 + + Sheet.3813 + + + + Sheet.3814 + + + + Sheet.3815 + + + + Sheet.3816 + + + + + + + + + + + + + + + + + + + Network Security Group.2127 + + Icon-networking-67 + + Sheet.3819 + + + + Sheet.3820 + + + + Sheet.3821 + + + + Sheet.3822 + + + + + + + Sheet.3823 + Virtual Desktop subnet + + + + + + + Virtual Desktop subnet + + + + + + + + + + + + + + + Private Endpoint.4005 + + g10 + + path4 + + + + path6 + + + + path8 + + + + + + Dynamic connector.3829 + + + + + + + Sheet.3830 + Pooled pool + + + + + + + Pooled pool + + Dynamic connector.1228 + + + + + + + Dynamic connector.3831 + + + + + + + Dynamic connector.3832 + + + + + + + Dynamic connector.3833 + + + + + + + + + + + + + + + + + + + + Key Vault.4023 + Key Vault (Zero Trust) + + Sheet.3835 + + Sheet.3836 + + + + Sheet.3837 + + + + Sheet.3838 + + + + Sheet.3839 + + + + Sheet.3840 + + + + Sheet.3841 + + + + + + + Key Vault(Zero Trust) + + + Dynamic connector.3842 + + + + + + + + + + + + + + + + + + + + Key Vault.3843 + Key Vault (Zero Trust) + + Sheet.3844 + + Sheet.3845 + + + + Sheet.3846 + + + + Sheet.3847 + + + + Sheet.3848 + + + + Sheet.3849 + + + + Sheet.3850 + + + + + + + Key Vault(Zero Trust) + + + Dynamic connector.3851 + + + + + + + Rounded Rectangle.3852 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Virtual Network.3853 + + Sheet.3854 + + Sheet.3855 + + + + Sheet.3856 + + + + Sheet.3857 + + + + Sheet.3858 + + + + Sheet.3859 + + + + + + Sheet.3860 + Virtual Desktop virtual network + + + + + + + Virtual Desktop virtual network + + + + + + + + + + + + + + + DDoS Protection.3861 + DDoS Protection + + g20 + + path2 + + + + path4 + + + + path6 + + + + ellipse8 + + + + path10 + + + + ellipse12 + + + + path14 + + + + ellipse16 + + + + path18 + + + + path4-0 + + + + rect45 + + + + rect45-7 + + + + rect45-7-8 + + + + rect45-78 + + + + rect45-7-2 + + + + rect45-7-8-8 + + + + + + + DDoS Protection + + + Sheet.3879 + Virtual Desktop subnet + + + + + + + Virtual Desktop subnet + + + + + + + + + + + + + + + Network Security Group.3880 + + + Sheet.3881 + Session host VMs (personal) + + + + + + + Session host VMs (personal) + + Rounded Rectangle.3882 + + + + + + + + + + + + + + + + + + + + + + + Sheet.3883 + Session host VMs (pooled) + + + + + + + Session host VMs (pooled) + + Rounded Rectangle.3884 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Private Endpoint.3885 + + g10 + + path4 + + + + path6 + + + + path8 + + + + + + Rounded Rectangle.3890 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.3891 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.3900 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.3909 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.3918 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + Sheet.3927 + + Rounded Rectangle.1149 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.839 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.848 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.857 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + + + + + + + + + + Virtual Machine Windows.1203 + + g16 + + rect2 + + + + path14 + + + + path10 + + + + polygon12 + + + + polygon14 + + + + polygon16 + + + + polygon18 + + + + + + + + + + Sheet.3965 + + + + + + + + + + + + + + + Route Table.1335 + + Icon-networking-82 + + Sheet.3968 + + + + Sheet.3969 + + + + Sheet.3970 + + + + Sheet.3971 + + + + + + + + + + + + + + + + + + + Application Security Group.815 + + Icon-networking-83 + + Sheet.3974 + + + + Sheet.3975 + + + + Sheet.3976 + + + + Sheet.3977 + + + + Sheet.3978 + + + + Sheet.3979 + + + + Sheet.3980 + + + + Sheet.3981 + + + + Sheet.3982 + + + + Sheet.3983 + + + + + + + + + + + + + + + + + + + Network Security Group.2127 + + Icon-networking-67 + + Sheet.3986 + + + + Sheet.3987 + + + + Sheet.3988 + + + + Sheet.3989 + + + + + + + + + + Sheet.3990 + + + + + + + + + + + + + + + Route Table.1335 + + Icon-networking-82 + + Sheet.3993 + + + + Sheet.3994 + + + + Sheet.3995 + + + + Sheet.3996 + + + + + + + + + + + + + + + + + + + Application Security Group.815 + + Icon-networking-83 + + Sheet.3999 + + + + Sheet.4000 + + + + Sheet.4001 + + + + Sheet.4002 + + + + Sheet.4003 + + + + Sheet.4004 + + + + Sheet.4005 + + + + Sheet.4006 + + + + Sheet.4007 + + + + Sheet.4008 + + + + + + + + + + + + + + + + + + + Network Security Group.2127 + + Icon-networking-67 + + Sheet.4011 + + + + Sheet.4012 + + + + Sheet.4013 + + + + Sheet.4014 + + + + + + + Sheet.4015 + Private endpoints subnet + + + + + + + Private endpoints subnet + + Rounded Rectangle.4016 + + + + + + + + + + + + + + + + + + + + + + + + + + Sheet.4017 + + + + + + + + + + + + + + + Route Table.1335 + + Icon-networking-82 + + Sheet.4020 + + + + Sheet.4021 + + + + Sheet.4022 + + + + Sheet.4023 + + + + + + + + + + + + + + + + + + + Network Security Group.2127 + + Icon-networking-67 + + Sheet.4026 + + + + Sheet.4027 + + + + Sheet.4028 + + + + Sheet.4029 + + + + + + + Sheet.4030 + Virtual Desktop subnet + + + + + + + Virtual Desktop subnet + + + + + + + + + + + + + + + Private Endpoint.4031 + + g10 + + path4 + + + + path6 + + + + path8 + + + + + + Dynamic connector.2183 + + + + + + + Dynamic connector.4036 + + + + + + + Dynamic connector.4037 + + + + + + + Dynamic connector.4038 + + + + + + + Dynamic connector.4039 + + + + + + + Dynamic connector.4040 + + + + + + + Sheet.4041 + + + + + + + + + Sheet.3653 + Virtual Desktop virtual network + + + + + + + Virtual Desktop virtual network + + Sheet.4044 + + + + + + + + + Sheet.4045 + Microsoft 365 + + + + + + + Microsoft 365 + + Sheet.4046 + + + + + + + + + Sheet.4047 + Microsoft 365 + + + + + + + Microsoft 365 + + diff --git a/docs/scenarios/azure-virtual-desktop/media/azure-virtual-desktop-architecture.png b/docs/scenarios/azure-virtual-desktop/media/azure-virtual-desktop-architecture.png deleted file mode 100644 index b4c0fb8950..0000000000 Binary files a/docs/scenarios/azure-virtual-desktop/media/azure-virtual-desktop-architecture.png and /dev/null differ diff --git a/docs/scenarios/oracle-iaas/oracle-network-topology-odaa.md b/docs/scenarios/oracle-iaas/oracle-network-topology-odaa.md index 98170283fb..05d545ea85 100644 --- a/docs/scenarios/oracle-iaas/oracle-network-topology-odaa.md +++ b/docs/scenarios/oracle-iaas/oracle-network-topology-odaa.md @@ -40,11 +40,7 @@ Consider the following recommendations when you design your network topology for - Ensure that you place application and database components in the same region and availability zone to reduce latency between your application and database. If your application components are in different subscriptions from your database components, see [Physical and logical availability zones](/azure/reliability/availability-zones-overview#physical-and-logical-availability-zones). Use the `AvailabilityZoneMappings` property to identify the specific physical availability zone for colocating the services. -- Oracle Database@Azure subnets don't support network security groups (NSGs). Follow these recommendations for security: - - - Use NSGs on the application subnets to control traffic to and from the application subnets. - - - Use on-platform firewall products, such as SELinux and cellwall, on the Oracle Database@Azure VM clusters to control traffic to the service. +- Oracle Database@Azure subnets don't support Azure network security groups (NSGs). Instead, use the [Oracle Cloud NSG](https://docs.oracle.com/iaas/Content/Network/Concepts/networksecuritygroups.htm) that gets created in the Oracle Database@Azure OCI Virtual Cloud Network (VCN) to control traffic to and from the Exadata/ADBS system. - Use Azure private DNS zones for name resolution between application and database subnets. For more information, see [Private DNS](/azure/dns/private-dns-overview).