4. Farm ArchitectureAll-in-one Server All Roles and SQL on one server Often seen in small farms SQL contention with SharePoint Easy to deploy, but not best practice No ability for test environment NOTE: Do not use SQL Express in Production!
5. Farm ArchitectureDedicated SQL Database Server Dedicated SQL Server All SharePoint roles on single box Less Disk IO Greater Performance Still no test environment…
6. Farm ArchitectureSmallest Highly Available Farm 2 Web/Query/Application /Central Admin/Inbound Email Servers 1 Dedicated Index Server (With Web role to allow it to crawl content) 2 SQL Standard Edition Cluster Nodes (Active/Passive) – Mirror also option Smallest highly available farm
9. Virtualised Farm ArchitectureEasy and Supported Microsoft Hyper-V (R2 recommended) or Vmware ESX supported (KB 897615) Great Windows Licensing Options (Ent = 4 licenses, Datacenter = unlimited) Allows for multiple farms, more servers Less cost, more failover options (Live Migration / Vmotion) Do not overcommit resources!
18. High Availability ArchitectureNetwork Load Balancing Hardware Based Load Balancing is Best F5 Cisco Content Switch Citrix Netscaler Windows Network Load Balancing Supported Unicast – Use two NICs Multicast – Requires Router Support
19. High Availability Architecture Network Load Balancing - Sample Web Role Servers sp1.companyabc.com (10.0.0.101) – Web Role Server #1 sp2.companyabc.com (10.0.0.102) – Web Role Server #2 Clustered VIPs shared between SP1 and SP2 (Create A records in DNS) spnlb.companyabc.com (10.0.0.103) - Cluster spca.companyabc.com (10.0.0.104) – SP Central Admin ssp1.companyabc.com (10.0.0.105) – SSP spsmtp.companyabc.com (10.0.0.106) – Inbound Email home.companyabc.com (10.0.0.107) – Main SP Web App mysite.companyabc.com (10.0.0.108) – My Sites
20. High Availability ArchitectureSQL Database Mirroring Available in SQL Server 2005/2008, both Standard and Enterprise Mirroring Keep a full copy of Database on another server Asynchronous (good for WAN scenarios, Enterprise edition only) or Synchronous
21. High Availability Architecture Database Mirroring – Single Site Option Single Site Synchronous Replication Uses a SQL Witness Server to Failover Automatically Mirror all SharePoint DBs in the Farm Use a SQL Alias to switch to Mirror Instance
22. High Availability Architecture Database Mirroring – Cross Site HA Mirroring Option Two Sites 1 ms Latency 1GB Bandwidth Farm Servers in each location Auto Failover
23. High Availability Architecture Database Mirroring – Warm Farm Asynchronous Option Two Sites Two Farms (one warm farm) Mirror only Content DBs Failover is Manual Must Reattach DBs Must re-index
25. Logical ArchitectureWeb Application Architecture Consider creating multiple Web Apps Example: spca.companyabc.com ssp1.companyabc.com mysite.companyabc.com home.companyabc.com Flexible and scalable!
26. Logical ArchitectureDistribute by Default Distribute content across multiple Site Collections Distribute Site Collections Across Multiple DBs Multiple databases = more controlled DB growth Try to keep your Content DBs manageable in size (50-100GB)
29. Hardware and SoftwareDisk, Memory, and Processor SQL Databases Require large amounts of space! Allocate Disk Space for Index and Query Servers as well Index corpus can grow to 5%-20% of total size of data indexed Database and Index Servers require most RAM (4GB, 8GB, or more) Multi-core processors recommended
30. Hardware and SoftwareWindows Server Versions Windows Server 2008 R2 (or RTM) highly recommended! Critical that new servers run x64, required for SharePoint 2010 SharePoint servers are fine with Standard edition of Windows, no extra gain for Enterprise SQL Servers may require Enterprise edition if using SQL Enterprise
31. Hardware and SoftwareSQL Server Versions SQL Server 2008 Recommended 64 bit also highly recommended (required for SharePoint 2010) SQL Server 2005 still supported SQL 2000 supported for Sharepoint 2007, but not for 2010, and not recommended Separate SQL Reporting Services server may be required for intensive reporting Standard edition of SQL generally fine, except for very large environments
33. SharePoint InstallationService Accounts Never use a single service account! Create the Following Accounts SQL Admin Account Installation Account SharePoint Farm Admin Search Admin Default Content Access Account Application Pool Identity Accounts
36. SharePoint InstallationCommand-line Installation of SharePoint Learn to install from Command-line Only way to specify SPCA Database Name SETUP, PSCONFIG and STSADM PSConfig is your friend! Powershellis the future here…
37. SharePoint InstallationRunning the Config Wizard to Install Servers Consider PSConfig Use Easy to remember port for SPCA (i.e. 8888) Better still, change SPCA to 443 later Use Common Database Naming Convention Account running wizard needs DBCreatorand Security Admin rights on SQL Server Run the wizard on additional servers as necessary
42. Kerberos AuthenticationStep 2: Create SPNs for SQL Create SPNs for SQL Syntax similar to following: Setspn.exe -A MSSQLSvc/spsql:1433 COMPANYABCRV-SQL-DB Setspn.exe –A MSSQLSvc/spsql.companyabc.com:1433 COMPANYABCRV-SQL-DB MSSQLSvc = Default instance, if named instance, specify the name instead In this example, SRV-SQL-DB is the SQL Admin account
43. Kerberos AuthenticationStep 3: Allow App Pool accounts and SP Computers to Delegate Use ADUC SharePoint Web Server Computer Accounts App Pool Identity Accounts
44. Kerberos AuthenticationStep 4: Edit Applicationhost.config Windows Server 2008 only Modify the ApplicationHost.config file <windowsAuthenticationenabled="true" useKernelMode="true" useAppPoolCredentials="true">
45. Kerberos AuthenticationStep 5: Enable Kerberos on Web App Enable Kerberos on the Web App (if not already turned on) Go to Application Management – Authentication Providers Choose the appropriate Web Application Click on the link for ‘Default’ under Zone Change to Integrated Windows Authentication - Kerberos (Negotiate) Run iisreset /noforce from the command prompt
46. Key Takeaways Highly consider Virtualization for SharePoint Create a test farm! Consider Database Mirroring and/or NLB for SharePoint HA Deploy the ‘five server farm’ for full High Availability Plan today for SharePoint 2010 (more on this in the next session!) Enable Kerberos Authentication
47. For More Information Speaker Books (http://www.samspublishing.com) SharePoint Database Mirroring Whitepaper (http://tinyurl.com/mirrorsp) Database Mirroring Failover Case Study (http://tinyurl.com/mirrorspcs) Microsoft ‘Virtualizing SharePoint Infrastructure’ Whitepaper (http://tinyurl.com/virtualsp) SharePoint Log Shipping Whitepaper (http://tinyurl.com/logshipsp)
48. Thanks for having me in Pune!Questions? Michael Noel Twitter: @MichaelTNoel www.cco.com