Hey I noticed there aren't a lot of thumbs up on these videos, but just thought id say I find these videos great. It was a great way for me to get a lot of the information I need, now I am polishing up my knowledge via practice questions and I feel pretty prepared to take the test here soon. Thanks.
Thanks Dean, now this subject related to networking makes more sense to me as you put it into a whole broad and corporate perspective. Also thanks for AZURE Experience Estiamtor, GREAT TOOL! indeed. Hey....Happy Teaching!!!!
Hi Dean, about the on-prems datacenter scenario, if we are not using RDP shortpath, do we have our network latency improved by using S2S VPN/ExpressRoute? I am asking this because due to reverse connection, the session host always connect to RD gateway first than RD gateway outbound connection to the client, are they utilizing the S2S VPN/ExpressRoute at all? Thanks a lot, this question bothers me for quite a long time.
Yes, the VPN can function as a private network connection and does benefit from RDPShort path. My latency here is about 100ms to East us Over my azure client VPN with RDPShort path it was 15ms
Hi! I'm going to deploy a new WVD but there is a FW appliance that has all the routing for Vnet on it. Does it have an impact for DNS configuration since customer has just onprem DNS service? We have a PoC running from 2019 version (not 2020 SPRING) and we faced issues with AD join and reaching SHosts since there is a firewall restricting communications. What do you recommend? (sorry for the long comment)
This series is awesome. Dean, in regards to network planning, Is fslogix an appropriate solution to save user profiles to Azure Files for on-prem users on a S2S connection? I'm trying to determine network performance on a S2S.
The FSLogix file share should be as close to the session hosts and users as possible. It is NOT recommended to have the FSLogix file share on prem to use AVD.
Hi Dean, I have some questions regarding the required bandwidth. After going through the docs, I notice that it's very hard to estimate the required BW, the best way to estimate is to monitor user activities using 3rd party tool like LoginVSI. But what does the recommended BW mean, for example, "Light workload - 1.5 Mbps", does that mean for a user that is using light workload via RDP, he/she needs 1.5Mbps BW, so if 2 users, they need 3 Mbps. and how to correlate "Workload type" and "Typical display resolutions", for example, "About 1024 × 768 px 1.5 Mbps", is it for light workload or medium/high workload? Thanks.
Yeah, this is a tough one. The bandwidth is per second so IF you had 2 users on the same VM and they both watched the same video at the same second that each took 1.5Mbps Then you would use 3 Mbps. But if one watches a video and the other is using excel then they have different BW usage. Also there is NO direct correlation of VM size to bandwidth. Bandwidth is consumed based on what the user is doing and how much data is sent over the site to their client when they do it, which is what the bandwidth doc shows. docs.microsoft.com/en-us/azure/virtual-desktop/rdp-bandwidth
Hi Dean - Just trying to get my head around how AVD works with express route. If we want to use AVD to deliver published apps to our on prem users via express route how does that work? how does AVD know which path to choose. I checked the service tags and I see a bunch (352) ip addresses for AVD PaaS service and i guess its a global service. when i checked the bgp service communities there is not one for AVD and nothing in the routing filter. I'm using private peering and a hub and spoke where the session hosts live so that's good but the AVD service (g/way, broker etc is a internet facing public ip service i cant advertise internally via bgp) so is it a case the internet is used to talk to avd and then the session host does a reverse connect over the express route? May need a Dean video to explain these flows LOL
The AVD service is only on the internet because it is a cloud provided service, like Azure storage. AND link storage you can setup a private email point for AVD now. Watch this, then comment over there if you still need help 👉 ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-UdD1kfKZwOM.html
@@AzureAcademy Wow Dean that video is next level, i will need to watch it a few times to get my head around that - thank you so much for breaking this down so us mortals can understand LOL - well maybe after a few more watches and coffees it may sink in - sounds like a game changer from the product team
Hi Dean, sorry to put comment here, sometimes when I replied in sub-comment, it seems like you will not get notification. Regarding S2S VPN/ExpressRoute, my question is if we do NOT use RDP short path, only use S2S VPN/ExpressRoute, can our latency get improved? I think no, because Session Host is not utilizing the S2S VPN/ExpressRoute to talk directly to our client in on-prems datacenter, it always bypass the RD GW, so what is your thought on this? Thanks
The answer is routing. If the user is somewhere in the world and they want to use WVD they will naturally connect over the public internet to the closest WVD service endpoint. If they are on a client VPN, the questions is where does the VPN terminate. If they are in France and have to VPN to Japan where the corporate office is but the WVD session hosts are in France Central...then they will have a lot of latency. So the question comes back to requirements, location of the users, location of WVD service endpoint and location of session hosts. Keep them all as close together as possible for the best low latency experience
Thanks for the great videos, Dean! Got a question hope you could advise. About the pooled session hosts, since all users are logged into the same VM and are having the same IP address from that 1 VM, is it there any known issues for this? Like, if some special apps that might need to have each user to obtain their own unique IP address to work properly? Just out of curiosity. Thanks!
I have run into this with the ZScaler client. It's not supported on windows multi-session because it can't isolate each user on the host. I have also seen this with some mainframe or terminal apps that grab a local com port and only allow 1 user at a time. In these cases, you either user personal host pools or you can configure your pooled hosts to only allow 1 user to log in at a time...or its just not a good AVD use case.
It depends on what you are doing. Read the network guidance doc to see latency and bandwidth of workload types docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/network-guidance
I've never done much besides lookup users in Azure but have 7 years VMware Horizon experience, but am now going in at the deep end to study AZ140 - your video series is hugely helpful thanks a lot for putting this together. QQ - is it possible to setup an AVD session host + an Azure AD DS service using the free credit from azure - I'm effectively a home-lab user (no customer/workplace infra I can use to study from) - and I need to get the hands on experience with all the exam objectives...any suggestions around how to do this 'easily' or on the cheap?
You’re welcome David, glad it has been a help to you. I wouldn’t use AADDS…limiting and expensive. I would setup a domain controller VM in Azure or on your home PC. The use free azure credits for all the other stuff. Also use azure files standard…very low cost.
Thank you very much for the video. Always enjoy watching your videos! Yesterday performed a cost calculation for the use of RDP Shortpath in our corporate network. I am surprised at the high outgoing traffic costs for the Azure Gateway. We'd love to use RDP Shortpath. However, in my opinion the cost is too high. Is my calculation correct? Thanks for the time! RDP Shortpath - WVD Traffic via S2S in Corporate Network User with dual monitor 1920x1080 Web Browsing and Office 2 mbps - 8 hours work day 7,2 GB/day per user 36 GB per week 144 GB/User per Month 150 User = 21,6 TB per month 21,7 TB outbound traffic from azure gateway / month for 150 users 21700 x 0,0700€ (price per GB - Internet Egress (routed via Microsoft Premium Global Network) = 1.519€/month 10,12€ / user per month for RDP Shortpath
I'm interested in hearing more because I have not seen those kinds of numbers from my customers. and I like how you are thinking, I look at things much the same way, however I believe you are off...not in the math but in how data is transferred. When you have a screen showing your desktop and nothing moves...how much data is transferred from Azure to you? the basic heartbeat / connect keep alive is around 20 bytes every 5 seconds and general input from you to WVD is 100 bytes or so. Keep in mind that the data rate would not be 100% consistent for 8 hours for the same reason. When things have to be drawn on the screen data is transferred over the network. I am also interested in HOW you calculated 2mbps? Also did you run your test for 8 hours straight with WVD in use? What were you doing in your WVD session for 8 hours? Also was that 8 hours of RDP ShortPath or Reverse Connect? Data from different apps also has an impact. Example, word uses 100Kbps but PowerPoint uses 4Mbps and video is around 8Mbps. Let me know...Thanks! 👍👍
Thanks for the great info, looking forward to continuing with this course! I’m wondering on how you would handle the deployment of WVD to a multi-jurisdiction company? Would you have separate VNET, DC, session hosts and pool for each set of users? E.g for users in US, separate for users in Europe, separate for users in South Africa etc?
The principal is to keep the VMs as close to the users as possible...so if you are located in East us and have users located in South Africa, I would have the session host VMs in both places and peered to your hub network...wherever that is...London for example. However some other thing external to WVD change that approach...like a company decision to keep all VMs in East us. That will work too...but understand users will experience latency...we still can’t change the laws of physics ☺️
Dean I'm confused about how to connect to the WVD service if I need to do it over a VPN site to site that is restricted to use internet, can you help to clarify an scenario like this?
It depends on what you mean by “connect to the WVD service” If you are talking about the session host VMs that are living in Azure Or you are talking about the client side. Let me know which you are asking about
Once your clients are on the VPN they are connected to your corporate network...do you force their internet traffic to be routed a certain way...or allow them to still go direct to the internet? If they go direct then it is WVD as usual. If the internet traffic is tunneled then it is a question of latency. Latency from the client to your routers, to the internet to WVD to the Session hosts This is why RDPShort path was created. To make private network traffic lower latency and more efficient
Hi Dean, one question. 03:45 Are WVD Gateways and Web Access servers located in POP sites? Do we have a tool/mechanism to check where I am connecting to while using WVD? Thanks
Yes they exist in the POP Yes there is a way to see where you are connected to. 1st in the RDP windows you can click the connection details in the connection bar and see which gateway it is. You can also find these details in log analytics
Hi Dean, Thanks for information, I've few questions below. 1. Does WVD core components(Gateway, Broker, Web server, SQL) are region specific and work fine only for users in same region ? will users from other region face latency issue while reaching to these services? Example -- if I subscribed WVD services in East Europe subscription and my 100 users are in India and they have VPN connection direct to Azure. will my users still go to East Europe to access wvd core services (Gateway, Broker, Web server, SQL) after entry from India to azure or Azure/WVD would take care and provide me same core components in India automatically? 2. If we have user base all over the globe, is it good to subscribe for WVD core services Paas (Gateway, Broker, Web server, SQL) in every region to achieve low latency? 3. is there any extra charges for the WVD sevices (Gateway, Web Server , Broker, SQL) or only WVD VM per user charges cover it ?
Happy to help! 1. The answer depends if you are using reverse connect or RDP ShortPath. In reverse connect the India users would communicate with the closest WVD gateway then the connection will be sent from there to your session host, authentication will happen then the session host will make an outbound connection to the gateway the customer used, then complete the connection to the users client 2. You do not have control over the AVD Core resources…Microsoft manages those 3. The AVD service itself is a free service. Cost comes from the VMs, Storage, network bandwidth, FSLogix storage and user licenses
Reverse connect is setup automatically, it is how AVD works. As for RDPShort path you can watch my video here ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-zEcTNYuSmhM.html And the docs are in the description
No you do not. What you have is fine as long as the VMs in Azure can reach the DC and join the domain. Just so you know, it is a best practice to have a domain controller in every location where authentication happens so, I would recommend building a domain controller VM in Azure...but, up to you...but you do not need AzureAD Domain Services.
