The time has come to make your move to the public cloud. But which one? This session will conduct a showdown between two of the biggest players, which also happen to be strong Citrix partners: Amazon Web Services and Microsoft Azure. We will compare their feature sets, service offerings and technologies and explain how these affect your ability to deliver desktops via a public cloud. Target features will include automation, deployment and backup; cost models such as bring-your-own-license; load balancing, traffic optimization and external access; and integration with on-premise clouds. In this session you will: • Understand the technology, cost and licensing differences between AWS and Azure • Hear about their SaaS/IaaS options • Receive guidance on which cloud is better for your organization

1. SYN254 - SHOWDOWN: AWS VS. AZURE FOR
DESKTOP DELIVERY
MAY 7 – 2.30PM
Henrik Johansson
Twitter: @HenrikJay
Web: https://www.ngenx.com || https://henrikjay.com
Email: henrik.johansson@ngenx.com || henrik@henrikjay.com

2. Tweet about this session with hashtag
#SYN254 and #CitrixSynergy

3. CTP, CCIA and AWS certified Architect.
Director of Professional Services.
13+ years Citrix experience,17+ years IT.
NetScaler Wizard, Public Cloud, Security,
Evangelist and Speaker.
Speaker bio compressed
Henrik Johansson
Twitter: @HenrikJay
Web: https://www.ngenx.com || https://henrikjay.com
Email: henrik.johansson@ngenx.com || henrik@henrikjay.com

4. Founded in 2000, nGenx is a pioneer in cloud-based application delivery.
Throughout our history, we have always pushed the envelope with
technology while working to build bridges between all of our technology
partners, including Microsoft, Citrix, Cisco, Amazon Web Services, NetApp,
RES, Google Chrome, Dell/Compellent, Intuit and others. Working with these
partners, we have developed a dynamic set of cloud solutions.
nGenx – White label CSP

5. So your moving to the cloud?
Cost/h
Features
Automation
Integration
Sizing
Redundancy
Security
Partner model
Cost savings
Scripting
Licensing

6. • Why public cloud
• Cost
• Operational
• Strategic
Agenda at a glance

7. • Cost savings
• OpEx vs CapEx
• Lower TCO
• Only pay for usage – Avoid over provisioning/capacity
• Scalability
• Rapid expansion – Local & Global
• DR
• Flexibility
• Change HW at a heartbeat…or at least a reboot
• Adapt platform to baseline dynamically
• Training
• Setup a lab instantly
• Try new features/technologies
Why public cloud
Marketing fluff?
Actually not!
If done right!

8. • Public Cloud
• Hybrid
• DR
Why public cloud – Usage Models

9. Why public cloud - Providers
Magic quadrant owned by Gartner

10. GETTING STARTED

11. • Both providers offer free tiers in different ways.
• Allow your staff to easily sign up and test
• Excellent for internal training on concepts
• Allow limited workloads and resources
• Does provide basic support and access to resources
• Credit Card and phone number is needed – Nothing else
Free Tier – Getting started

12. AWS Free Tier
Azure Free Trial
• A monthly recurring program
• Some services are only allowed for 12 months (EC2, ELB, EBS, S3)
• Allow for example Micro server with windows and linux, EBS, Cloud watch,
billing alerts etc.
• Will be discounted from bill continuously
• Charges over free tier will be charged to credit card.
Free Tier – Getting started
• Trial program with $200 of services spent as you wish
• 30 days, after that resources are decommissioned
• Exceeding $200 does not incur charge, only suspend resources
• Can keep resources if changing to Pay-As-You-Go Azure subscription
• MSDN Subscriptions include $100+/month and get discount on VM’s
• Enough for a small instance per month

13. FEATURES

14. Naming convention / Feature parity
AWS Azure
EC2 Virtual Machines
VPC Virtual Network
RDS SQL Database
ELB Traffic Manager
Route 53 Windows Azure name resolution
EBS/S3/Glacier Storage
Direct Connect ExpressRoute
IAM with MFA Multi Factor Authentication
Security Groups EndPoints
SNS/SES Service Bus
EC2ConfigService VM Agent
SQS/Auto Scale Scheduler
CloudFormation/CloudWatch/Auto Scale Automation

15. Features
AWS Azure
Integrated in Citrix MCS ✔ X
Workspaces Services integration ✔ ✔
Support for NetScaler/BranchRepeater ✔ X
Support for Windows 2012 R2 X ✔
License Mobility ✔1 ✔1
Support OS import ✔2 ✔3
Puppet/Chef integration ✔ ✔
#1 Only Server Applications, not OS
#2 From XenServer, Hyper-V, vmware (plugin/tool)
#3 Currently, Azure only supports VHD fixed disk

16. • Both AWS and Azure provide hosted managed database
• Simplifies management and deployment and automatic snapshot/backups
• Does not work for XD7+ (no WIA)
• Both provide multi AZ alternatives
• BYOL Bring Your Own License options
• AWS also provide MySQL, PostgreSQL and Oracle
RDS vs Instance with SQL

17. AWS VPC Peering
Azure site-to-site
• Allow connection between two VPC using private subnets
• Works across accounts/tenants
• Cannot have overlapping CIDR blocks
• Does not work cross Regions
• Security thru ACL, Sec Groups and no transitive peering allowed
Features - Inter zone traffic
• Uses VPN to connect
• Same possibilities and constraints as normal site-to-site VPN
• Security thru ACL and Windows Firewall

18. AWS Reserved Instances (EC2)
Azure Commitment Plans
• Free to choose but base on expected usage (Low, Medium, High)
• Offer 1 or 3 year term with upfront fee
• Longer term and higher utilization equal to lower hour rate
• Allow moving to other AZ within Region
• Easy to deploy but requires more planning ahead of time
• Can sell on Marketplace
AWS Reserved Instances vs Azure Commitment Plans
• Based on monthly pay commitment or Pre-Pay
• Min $500/month on Pay Monthly Plan
• Allow discount between 20-32%
• Applies to all resources except Storage
• Simple to use
• Non refundable

19. COST

20. • Monitor your usage/cost
• Be Agile. If an instance doesn’t fit you…change it!
• Make your own baseline
• Compare benefits of Reserved Instances and Commitment Plans
General Guidelines

21. • Cost calculations are very complex
• Benefit of public cloud is known cost
• Resource cost is a perishable
produce today.
• Use dynamic calculations allowing
you to update easily
• Calculate in min/max
• Comparing apples to oranges
take time!
Cost calculations

22. • Use the providers calculators
• Calculations so far show AWS is slightly cheaper then Azure but contain
many unknown factors.
• Look for instances
with highest discount
• AWS bill per hour,
Azure per minute
Cost/h is not your
main factor!
Cost calculations

23. • Light Utilization RIs
• Suitable for couple of h/day or couple
day/week
• Medium Utilization RIs
• Suitable for running most of the time but allow
flexibility.
• Heavy Utilization RIs
• Committing to running 100%
• Highest savings
• Also available for RDS
AWS Reserved Instances
Annual
Utilization
Medium
Utilization RI
Heavy
Utilization RI
20% -32% -233%
40% 5% -66%
60% 17% -11%
80% 24% 17%
100% 27% 33%

24. AWS Reserved Instances – Break evenUtilization
rate
r3.xlarge on-
demand
r3.xlarge 1yr
medium
r3.xlarge 1yr
heavy
1y (8h/d) $1,786 $2,466 $3,306
1y (10h/d) $2,232 $2,622 $3,306
1y (12h/d) $2,678 $2,778 $3,306
1y (14h/d) $3,125 $2,935 $3,306
1y (16h/d) $3,571 $3,091 $3,306
1y (24h/d) $5,357 $3,716 $3,306
3y (8h/d) $5,357 $7,398 $7,415
3y (10h/d) $6,696 $7,867 $7,415
3y (12h/d) $8,035 $8,335 $7,415
3y (14h/d) $9,374 $8,804 $7,415
3y (16h/d) $10,714 $9,273 $7,415
3y (24h/d) $16,070 $11,148 $7,415

25. Azure Commitment Plans
MONTHLY
COMMITTED SPEND
6-MONTH
(MONTHLY PAY)
12-MONTH
(MONTHLY PAY)
6-MONTH
(PRE-PAY)
12-MONTH
(PRE-PAY)
$500-$14,999 20% 22.50% 22.50% 25%
$15,000 - $39,999 23% 25.50% 25.50% 28%
$40,000 and
above 27% 29.50% 29.50% 32%

26. OPERATIONAL

27. AWS - CloudWatch
Azure Monitoring
• Basic monitoring free (7 metrics, 5min)
• Detailed monitoring cost over 10 alarms, 1 million API reqs. (10 metrics, 1min)
• ELB Have active service monitoring
• Metrics for Billing
• Notifications using SNS, SES
• Provide Phone app for basic monitoring and management
Monitoring/Alerting
• Basic monitoring included (CPU, Data In/Out, Disk Read/Write Throughput)
• Verbose monitoring allows deeper monitor by pulling performance metrics
from server instance
• Basic collect every 3min and Verbose 5min, 1h and 12h.
• Verbose is stored for 10 days and require Azure Diagnostics and
connections strings to access storage
• Alerts are available thru email including Billing alerts

28. SLA’s
AWS Azure
EC2 | Cloud Services, Virtual Machines 99.95% 99.95%
VPC | Virtual Networks X 99.9%
RDS (Multi AZ) | SQL Database 99.95% 99.5%
AWS S3 | Azure Storage 99.9% 99.9%/99.99%
Route 53 | Traffic Manager 100% 99.99%
CloudFront | CDN 99.9% 99.9%
SLA’s measured in 5min intervals
http://azure.microsoft.com/en-us/support/legal/sla/
http://aws.amazon.com/ec2/sla/ (replace ec2 with desired service)
*Does this mean services won’t be down?
No, service credits solve that!

29. Support
AWS
Basic
Azure
Free
Customer service 24x7x365 (not tech. support) ✔ X
Technical support ✔#1/#2
X
Dashboard/Billing ✔ ✔
Community/Support Forums ✔ ✔
Response time X X
Price/month $0 $0
#1: Support for Health Checks on EC2 and ESB
#2 Technical Customer Service Associate

30. Support
AWS
Dev
Azure
Dev
Technical Support ✔#1/#2/#3 ✔#2/4
Named contacts 1 ?
Response time <12h <8h
Architecture Support ✔#5
X
Best practice guidance ✔ X
Client Side Diagnostic Tools ✔ X
Price/month $49 $29
#1 Email
#2 Local business hours
#3 Cloud Support Associate
#4 Break fix support 24/7
#5 Building blocks

31. AWS
Business
Azure
Standard
Azure
Pro. Direct
Technical Support ✔#1/#2
✔#3
✔#4
Named contacts 5 ? ?
Response time <1h <2h <1h
Architecture Support ✔#5
- -
IAM & API for Support access ✔ - -
TAM/Service Delivery Management - X ✔#6
Priority Handling & Escalation Phone Line - X ✔
AWS Trusted Advisor / Azure Advisory Support ✔ X ✔#7
Price/month $100/10%#8 $300 $1000
#1 Phone, Chat, Email, Live Screen Sharing (24/7)
#2 Cloud Support Engineer
#3 Phone (3 call backs/month)
#4 Phone Unlimited
#5 Use Case Guidance
#6 Pooled
#7 Limited
#7 Greater of with Volume discount

32. AWS
Enterprise
Azure
Premier
Technical Support ✔#1/#2
✔
Named contacts
8
?
Response time <15m <15m
Architecture Support ✔#4
-
IAM & API for Support access ✔ -
TAM/Service Delivery Management ✔ ✔
Priority Handling &Escalation Phone Line - ✔
AWS Trusted Advisor / Azure Advisory Support ✔ ✔
Price/month $15k/10%#5 ?#6
#1 Phone, Chat, Email, Live Screen Sharing, TAM (24/7)
#2 Sr. Cloud Support Engineer
#3 Phone (3 call backs/month)
#4 Application Architecture
#5 Greater of with Volume discount
#6 Contact for pricing

33. SECURITY

34. AWS highlights - IAM with MFA
Azure highlights - Azure Access with Multi-Factor Authentication
• Highly detailed delegation (user, role, federation)
• Security Keys (use with caution) for SDK/command tools/Powershell access
• Use SSL Cert for identification thru SSH or password retrieval
• Built in support for clearing local password on boot
http://aws.amazon.com/iam/
Security - Access
• Admin, O365, on-prem, SDK
• Federation access
• User account thru PowerShell
• OTP thru mobile app, phone call, SMS
• Security reports
http://azure.microsoft.com/en-us/services/multi-factor-authentication/

35. Security - Compliance
AWS
HIPAA FIPS 140-2
SOC 1/SSAE 16/ISAE 3402 CSA
SOC 2 MPAA
SOC 3
PCI DSS Level 1
ISO 27001
FedRAMP(SM)
DIACAP and FISMA
ITAR
Azure
HIPAA
SOC 1/SSAE 16/ISAE 3402
SOC 2
Cloud Security Alliance Cloud Controls
Matrix
PCI DSS Level 1
ISO/IEC 27001:2005
FedRAMP
G-Cloud IL2
FERPA

36. HYBRID CLOUD

37. AWS VPC VPN
Azure VPN
• $0.05/VPN Connection-hour + Egress data
• IPsec based
• No restrictions on throughput enforced
• Supported devices include:
• Static: Cisco ASA 5500 Series/ISR, MS Windows Server 2008 R2 RRAS, Juniper
• Dynamic (require BGP): Cisco ISR, Palo Alto PA Series, Vyatta Network OS, Juniper
Integrating with On-Prem
• $0.05/VPN Connection-hour + Egress data ($0.034 - $0.04 for 6/12 m plan)
• IPsec based
• No BGP
• Supported devices include:
• Static: Citrix CloudBridge, F5 BIG-IP, Cisco ASA/ASR/ISR, Juniper
• Dynamic (no BGP): Cisco ASR/ISR, MS Windows 2012 RRAS, Juniper

38. AWS Direct Connect
Azure ExpressRoute - Network Service Providers
• Available at 8 regions
around the world
• Egress traffic cost
$0.02-0.11/Gb depending on region
• 40+ partners providing Direct Connect infrastructure
Integrating with On-Prem
• In Preview (50% discount)
• Available at US East/West
• 2 Providers
• No egress data cost
Port Speed 50M* 100M* 200M* 300M* 400M* 500M* 1G 10G
Port-h Rate $0.03/h $0.06/h $0.12/h $0.18/h $0.24/h $0.30/h $0.30/h $2.25/h
Monthly cost $22.32 $44.64 $89.28 $133.92 $178.56 $223.20 $223.20 $1,674.00
Gb vs Azure
fixed price**
28.9TB/
19.3TB
42.8TB/2
8.5TB
168.8TB/
112.6TB
288.8TB/
192.6TB
Network Service Provider
Port Speed
10 Mbps 50 Mbps 100 Mbps 500 Mbps 1 Gbps
Monthly cost $300 $600 $900 $3,600 $6,000
6 or 12-month Plans
$204 -
$240
$408 -
$480
$612 -
$720
$2,448 -
$2,880
$4,080 -
$4,800
*Need to go thru partner supporting AWS Direct Connect
** Based on US West/East egress cost Provider cost not included

39. Q: Do I still need a CSA/CSP partner with all these new features?
A: Yes today? Probably yes tomorrow. Help/guidance from certified partner
Q: Do I have to be a partner to run public cloud services?
A: No, anyone with a credit card can sign up and start running services.
Q: What partnerships can I join?
A: Due to partnership complexity it is easier to talk with you reps or check
https://mspartner.microsoft.com/en/us/pages/membership/enroll.aspx
https://aws.amazon.com/partners/
FAQ

40. Best public cloud for desktop delivery is:
It depends…
Where to go…The winner!

41. Henrik Johansson
Twitter: @HenrikJay
Web: https://www.ngenx.com || https://henrikjay.com
Email: henrik.johansson@ngenx.com || henrik@henrikjay.com
Questions?

42. Before you leave…
Recommended related breakout sessions:
SYN258: XenDesktop monitoring bake-off. Jarian Gibson
ACC Room 210B, May 7, 3:30 pm - 4:15 pm
Conference surveys are available online at www.citrixsynergy.com starting
Thursday, May 8 at 9:00 a.m.
ᵒ Provide your feedback by 6:00 p.m. that day to be entered to win one of many prizes
Download presentations starting Monday, May 19, from your My Event
Planning Tool