Hide Notes 

Slide 1: Best Practice SharePoint Farm Architecture Click to edit Master subtitle style Michael Noel Convergent Computing Twitter: @MichaelTNoel 12/16/09
Slide 2: Session Agenda • Farm Architecture Virtualised Farm Architecture High Availability Design Logical Architecture Hardware and Software SharePoint Installation Kerberos Authentication • • • • • • 12/16/09
Slide 3: Farm Architecture Click to edit Master subtitle style Best Practice SharePoint Designs 12/16/09
Slide 4: Farm Architecture All-in-one Server • All Roles and SQL on one server Often seen in small farms SQL contention with SharePoint Easy to deploy, but not best practice No ability for test environment • • • • 12/16/09
Slide 5: Farm Architecture Dedicated SQL Database Server • • Dedicated SQL Server All SharePoint roles on single box Less Disk IO Greater Performance • • • Still no test 12/16/09 environment…
Slide 6: Farm Architecture Smallest Highly Available Farm • 2 Web/Query/Application /Central Admin/Inbound Email Servers 1 Dedicated Index Server (With Web role to allow it to crawl content) 2 SQL Standard Edition Cluster Nodes (Active/Passive) – Mirror also option • • 12/16/09
Slide 7: Farm Architecture Scalability Scale up and Scale out… 12/16/09
Slide 8: Click to edit Master subtitle style Virtualised Farm Architecture Less Hardware, less cost… 12/16/09
Slide 9: Virtualised Farm Architecture Easy and Supported • Microsoft Hyper-V (R2 recommended) or Vmware ESX supported (KB 897615) Great Windows Licensing Options (Ent = 4 licenses, Datacenter = unlimited) Allows for multiple farms, more servers Less cost, more failover options (Live Migration / Vmotion) 12/16/09 • • •
Slide 10: Virtualised Farm Architecture Cost Effective Farm / No HA   12/16/09  Allows organisations that wouldn’t normally be able to have a test environment to run one Allows for separation of the database role onto a dedicated server
Slide 11: Virtualised Farm Architecture Fully Redundant Farm with only Two Servers    HighAvailability across Hosts All components virtualised Uses only two Windows Ent Edition Licenses 12/16/09
Slide 12: Virtualised Farm Architecture Best Practise, Highly Available and Scalable Farm    Highest transaction servers are physical Multiple farm support, with DBs for all farms on the SQL cluster Only five physical servers total, 12/16/09 but high
Slide 13: Virtualised Farm Architecture Virtualisation Scalability 12/16/09
Slide 14: Click to edit Master subtitle style High Availability Architecture Network Load Balancing and SQL Database Mirroring 12/16/09
Slide 15: High Availability Architecture Network Load Balancing • Hardware Based Load Balancing is Best – F5 Cisco Content Switch Citrix Netscaler – – • Windows Network Load Balancing Supported – Unicast – Use two NICs 12/16/09
Slide 16: High Availability Architecture Network Load Balancing - Sample – Web Role Servers • sp1.companyabc.com (10.0.0.101) – Web Role Server #1 sp2.companyabc.com (10.0.0.102) – Web Role Server #2 • – Clustered VIPs shared between SP1 and SP2 (Create A records in DNS) • • spnlb.companyabc.com (10.0.0.103) - Cluster 12/16/09
Slide 17: High Availability Architecture SQL Database Mirroring • Available in SQL Server 2005/2008, both Standard and Enterprise Mirroring Keep a full copy of Database on another server Asynchronous (good for WAN scenarios, Enterprise edition only) or Synchronous 12/16/09 • •
Slide 18: High Availability Architecture Database Mirroring – Single Site Option • Single Site Synchronous Replication Uses a SQL Witness Server to Failover Automatically Mirror all SharePoint DBs in the Farm Use a 12/16/09 SQL Alias to • • • •
Slide 19: High Availability Architecture Database Mirroring – Cross Site HA Mirroring Option • Two Sites 1 ms Latency 1GB Bandwidth Farm Servers in each location Auto Failover 12/16/09 • • • •
Slide 20: High Availability Architecture Database Mirroring – Warm Farm Asynchronous Option • Two Sites Two Farms (one warm farm) Mirror only Content DBs Failover is Manual Must Reattach DBs 12/16/09 • • • •
Slide 21: Logical Architecture Click to edit Master subtitle style Do it right the first time… 12/16/09
Slide 22: Logical Architecture Web Application Architecture • • Consider creating multiple Web Apps Example: – spca.companyabc.com ssp1.companyabc.com mysite.companyabc.com home.companyabc.com – – – • Flexible and scalable! 12/16/09
Slide 23: Logical Architecture Distribute by Default • Distribute content across multiple Site Collections Distribute Site Collections Across Multiple DBs Multiple databases = more controlled DB growth Try to keep your Content DBs • • • 12/16/09
Slide 24: Logical Architecture Sample Logical Architecture 12/16/09
Slide 25: Click to edit Master subtitle style Hardware and Software Determining the right tools for the job 12/16/09
Slide 26: Hardware and Software Disk, Memory, and Processor • SQL Databases Require large amounts of space! Allocate Disk Space for Index and Query Servers as well Index corpus can grow to 5%-20% of total size of data indexed Database and Index Servers require most RAM (4GB, 8GB, or more) Multi-core processors recommended • • • • 12/16/09
Slide 27: Hardware and Software Windows Server Versions • Windows Server 2008 R2 (or RTM) highly recommended! Critical that new servers run x64, required for SharePoint 2010 SharePoint servers are fine with Standard edition of Windows, no extra gain for Enterprise SQL Servers may require Enterprise edition if using SQL Enterprise • • • 12/16/09
Slide 28: Hardware and Software SQL Server Versions • SQL Server 2008 Recommended 64 bit also highly recommended (required for SharePoint 2010) SQL Server 2005 still supported SQL 2000 supported for Sharepoint 2007, but not for 2010, and not recommended Separate SQL Reporting Services server may be required for intensive reporting Standard edition of SQL generally fine, except for • • • • • 12/16/09
Slide 29: SharePoint Installation Click to edit Master subtitle style Getting the steps right 12/16/09
Slide 30: SharePoint Installation Service Accounts • Never use a single service account! Create the Following Accounts – • SQL Admin Account Installation Account SharePoint Farm Admin Search Admin Default Content Access Account Application Pool Identity Accounts – – – – – 12/16/09
Slide 31: SharePoint Installation Installation Process • Choose ‘Complete’ Installation Do not select ‘Stand-alone’ for a Production environment! • 12/16/09
Slide 32: SharePoint Installation Installation Process • Choose Index Location during Install Index location can be changed later, but more difficult • 12/16/09
Slide 33: SharePoint Installation Command-line Installation of SharePoint • • Learn to install from Command-line Only way to specify SPCA Database Name SETUP, PSCONFIG and STSADM PSConfig is your friend! Powershell is the future here… • • • 12/16/09
Slide 34: SharePoint Installation Running the Config Wizard to Install Servers • Consider PSConfig Use Easy to remember port for SPCA (i.e. 8888) Better still, change SPCA to 443 later Use Common Database Naming Convention Account running wizard • • • • 12/16/09
Slide 35: SharePoint Installation Create a SQL and/or DNS Alias! • Most flexible approach! spsql.abc.com = sql1 • 12/16/09
Slide 36: Click to edit Master subtitle style Kerberos Authentication Security, Security, Security 12/16/09
Slide 37: Kerberos Authentication Enable for Best Practise Security! • • Use Kerberos when creating Web Apps Extra steps required, but worth it… 12/16/09
Slide 38: Kerberos Authentication Step 1: Create SPNs for Web Apps • Create Service Principle Names (SPNs) Used for impersonation • 12/16/09
Slide 39: Kerberos Authentication Step 2: Create SPNs for SQL • Create SPNs for SQL Syntax similar to following: – • Setspn.exe -A MSSQLSvc/spsql:1433 COMPANYABC\SRVSQL-DB Setspn.exe –A MSSQLSvc/spsql.companyabc.com:1433 COMPANYABC\SRV-SQL-DB – • MSSQLSvc = Default instance, if named instance, specify the name instead In this example, SRV-SQL-DB is the SQL Admin account 12/16/09 •
Slide 40: Kerberos Authentication Step 3: Allow App Pool accounts and SP Computers to Delegate • • Use ADUC SharePoint Web Server Computer Accounts App Pool Identity 12/16/09 Accounts •
Slide 41: Kerberos Authentication Step 4: Edit Applicationhost.config • Windows Server 2008 only Modify the ApplicationHost.config file <windowsAuthentication enabled="true" useKernelMode="true" • 12/16/09
Slide 42: Kerberos Authentication Step 5: Enable Kerberos on Web App • Enable Kerberos on the Web App (if not already turned on) – Go to Application Management – Authentication Providers Choose the appropriate Web Application Click on the link for ‘Default’ under Zone Change to Integrated Windows Authentication Kerberos (Negotiate) – – – • 12/16/09 Run iisreset /noforce from the command
Slide 43: Key Takeaways • Highly consider Virtualization for SharePoint Create a test farm! Consider Database Mirroring and/or NLB for SharePoint HA Deploy the ‘five server farm’ for full High Availability Plan today for SharePoint 2010 (more on this in the next session!) • • • • 12/16/09
Slide 44: For More Information • • • • • • • Speaker Books (http://www.samspublishing.com) SharePoint Database Mirroring Whitepaper (http://tinyurl.com/mirrorsp) Database Mirroring Failover Case Study (http://tinyurl.com/mirrorspcs) Microsoft ‘Virtualizing SharePoint Infrastructure’ Whitepaper (http://tinyurl.com/virtualsp) SharePoint Log Shipping Whitepaper • 12/16/09
Slide 45: Thanks for having me in Pune! Michael Noel Twitter: @MichaelTNoel www.cco.com 12/16/09