ArcGIS Enterprise: An Overview of Deployment Options

hello my name is derek burke and i'm joined by my colleague mark carlson we are system architects on the enterprise deployment team in the geo experience center today we're going to review the different options available to deploy arches enterprise and also provide tips that we use every day in our role of managing hundreds of gis environments for esri's global business development division but before we jump into arches enterprise deployment options let's take a few minutes to review the arcgis platform architecture and associated best practices there's a great white paper called architecting the arches platform best practices it contains implementation guidelines and best practices that are conceptual in nature and help guide you through designing your gis to meet your organizational needs before deploying arches enterprise it's important to have a thorough understanding of these needs and what capabilities are necessary to achieve those needs and outcomes from there you can develop a plan and a roadmap for your implementation here we have a conceptual representation of the arcgis platform and the conceptual boundaries that separate the functions of the platform the diagram on the right illustrates platform capabilities combined with best practices and patterns of business use we'll be focusing on the infrastructure section both the components and best practices these components include hardware software services and data repositories that are the core of the arches platform there's numerous best practices including load balancing high availability and workload separation which is just to name a few but let's dive deeper with some best practice examples as they relate to infrastructure in arches enterprise deployment considerations the first best practice we'll take a look at is automation automation streamlines administrative workflows and repetitive tasks improving efficiency consistency and productivity and reducing risk in our practice at esri managing hundreds of servers we strive to automate everything we'll be demoing several options for automating arcgis enterprise deployments the next two best practices are important concepts to take note of while simpler architectures work well for many deployments the next topics are advanced configurations that involve using multiple machine deployments depending on your business needs high availability is one of these best practices which helps you achieve your sla within your organization it's a series of strategies for minimizing downtime while maximizing performance and reliability before designing your implementation solution it's important to determine how much downtime is acceptable to increase uptime one strategy is to reduce single points of failure for an arcgis enterprise deployment this could be deploying redundant systems and then migrating traffic to those environments please see the url below for more information if it's right for you lastly workload separation is the approach of maximizing system performance and reducing risk by optimizing resources such as servers for specific tasks in our arches enterprise deployment context will deploy servers that focus on these specific tasks such as analysis or real-time image processing separating these specialized workloads allows you to optimize your infrastructure for those specific tasks from an arcgis enterprise perspective we'll be discussing deployment options for arches enterprise based deployment which consists of several components including the portal for arcgis the hosting server arcgis data store and web adapters additionally overview deployment of optional components and server roles including the spatial temporal big data store which is used in supporting geoevent geoanalytics and tracker for example we'll also discuss optional server roles that can be federated to arcgis enterprise to support specific use cases these could be the need to serve image services or real-time data using geo event server just for example before we demo let's take a high level overview of the options that are available for deploying arcgis enterprise for our simple automated offerings we have the arches enterprise builder this is perfect for that single machine deployment on premise next for the cloud we have our arches enterprise cloud builders for both aws and azure these deployments have the option to either deploy a single machine or multiple machine enterprise deployment they also provide deployments for adding server roles to the base enterprise such as hosting image services notebooks and more you can find out more information on enterprise.arcgis.com we'll be demoing these deployments later in the presentation next we have our more advanced automation tools these include chef and powershell that allow users to fully customize their deployments these are for the more advanced gis programmer and professional for enterprise deployment automation we have a handy matrix that provides detail of each automation deployment tool and the level of support characteristics this can help guide you to select the best one for your needs from here i'm going to turn it over to mark who's going to demo some simple automated deployment options thanks derek for that overview now let's review in more detail the simple automation techniques that are available to you today we will first demo the arcgis enterprise builder then demo two cloud deployments one using the arcgis enterprise cloud builder for aws and the other using the arcgis enterprise cloud builder for azure the arcgis enterprise builder is perfect for installing on a single machine you can also upgrade previous deployments that were deployed with the enterprise builder just make sure you have your portal and server licenses available when using the builder let's see the builder in action you can find additional information about the arcgis enterprise builder by visiting the arcgis enterprise and selecting the installation and deployment tab scrolling down we will find the arcgis enterprise builder click learn more here you will find information about how to download the builder and more also to find more information about how to download your arcgis licenses from my.esri.com you can watch our video hosted in youtube simply open a search and search youtube licensing arcgis enterprise and select the licensing video this is a good reference when working with the my esri site this demo i have deployed a virtual machine and have already downloaded the arcgis enterprise builder i've also copied both the arcgis portal and server licenses to location on my server before we launch the arcgis enterprise builder i want to make sure the internet explorer enhanced security configurations are turned off you can access this setting in the server manager console from the console select local server and then find the internet explorer enhanced security configuration it is on by default we simply want to turn this off and select ok with this setting now off we just need to reset the security configuration in the internet explorer web browser simply open the web browser and for our deployment purposes we just want to select don't use recommended settings and uncheck do not track requests and select ok next let's select the internet options the advanced tab and reset now we are ready to run the arcgis enterprise builder so i will navigate to where i downloaded the enterprise builder right click and we'll go ahead and mount this disk and simply double click on the builder to execute now we are ready to get started simply click next accept the license agreement and we will keep the default destination folder i will keep the default user arcgis and provide a windows security compliant password here we can either keep the default web adapter names or change them if we want to i will keep the default web adapter names now we need to provide our authorization file for arcgis server now i am ready to install i'd also like to note that just for the sake of time the installation has been sped up for example arcgis enterprise builder generally takes about an hour but we sped it up here to save some time clicking install will install portal for arcgis arcgis server arcgis data store portal web styles and the web adapters for both portal and server once the installation is complete we will need to continue with the configuration wizard the arcgis enterprise builder has finished installing our software next we need to exit this wizard to start the configuration of our arcgis enterprise simply click advanced and proceed to localhost before providing the portal license we need to enable https on our server since i did not have iis configured before i ran the builder i let the builder install and configure iis for me now we need to enable https and while we are enabling it we will also bind a domain certificate to port 443 so if we go to iis manager and we can expand our server here go to sites default websites if we look at our bindings you can see that 443 is not enabled we can either choose to do a self-signed certificate for or obtain a domain certificate we made this easy for you to do if you visit portal for arcgis and hit the administrator tab we have a section called create a domain certificate we provide the powershell script that will create a domain certificate for you we just have to copy this script run powershell as administrator and we can go ahead and create our powershell script i simply pasted the code from the online documentation into this new powershell script i'll now save this powershell script as certificate hit save simply going to the directory of where i just saved that powershell script and now i can run the command i now have a certificate generated for my server and i accepted all of the default parameters within the script you can find the default password within the script itself in this case it's called certificate now if you open up iis manager again let's navigate to server certificates here you can see that this the certificate has already been imported into my manager now we can navigate back to the default website click bindings and as you can see it has been attached to port 443 now we can finish the arcgis enterprise configuration we choose our portal license file choose next create the initial site admin account for our portal this is the initial site admin user you will use once your portal is available and the creator license type add additional information we will keep the defaults for the content directories we will now let the wizard finish the configuration as the wizard completes each component you will either see a green check mark or a red x red x occurs you will need to do some investigating and you may need to adjust some of your parameters the arcgis enterprise configuration wizard has now successfully completed we are provided the urls for the portal and server sites simply click on the link for our portal environment and we can sign in with the initial admin account we created with the builder and now our portal is ready to use for our next two deployments we will use the arcgis enterprise cloud builder for aws and the rts enterprise cloud builder for azure both of these builders provide a straightforward approach to deploying an arcgis enterprise in the cloud environment each builder offers deploying a single machine or multi-machine arcgis enterprise deployment they each also provide deploying and configuring additional arcgis server rules to your environment if you choose the builders to deploy you also have the option to upgrade with the builder in the future we have found it helpful to review some common terminology as it relates to cloud deployments in both environments the enterprise is deployed in a virtual network in aws this is represented by the vpc and in azure it's called a v-net also servers are deployed within virtual networks a server in aws is referred to as an ec2 instance and a vm in microsoft azure if you have a multi-machine arcgis server site deployed in the cloud the machines are controlled by an auto scaler group in aws or an availability set in microsoft azure also check out the variety of storage options in each cloud environment you must review the requirements of arcgis prior to selecting a storage option not all cloud storage options are supported let's review the arcgis enterprise builder for aws to deploy using the aws cloud builder you must update the dns records to an elastic ip address this will be the url used for your deployments you also must have your portal and arcgis server licenses ready the aws key pair is required when remotely accessing the deployed ec2 instance from your local machine you must also subscribe to the arcgis images in the aws marketplace the aws cloud builder supports both windows and linux deployments make sure you have subscribed to the correct version and operating system you are trying to deploy we will be demoing the arcgis enterprise cloud builder for aws we will use the builder to deploy a single machine arcgis enterprise environment we will need to select the aws region to deploy and either choose an existing vpc or create a new one with the builder the builder will then use esri's aws image that we subscribe to in our aws account to deploy an ec2 instance if this is your first time using the builder you will notice a new s3 bucket that has been created this bucket is created by the builder and contains the json deploy file that will be located in the deployments folder and the resources folder contains arcgis license files and ssl certificates the aws enterprise builder will prompt you for these files and upload them for you into this bucket i will now deploy a single machine deployment in aws using the cloud builder you can find more information about how to download the cloud builder by visiting the arcgis enterprise in the cloud and selecting the aws tab here you will find information about the cloud builder for amazon so i have already downloaded the cloud builder for aws so let's execute the program first i'm going to be prompted to sign in to my aws account the identity being used to log into aws must have the proper permissions to deploy environments in amazon we can either provide an access key id and the secret or if we so choose we can choose our profile that has been pre-configured on our machine in this case i'm going to use my profile aws 3 and sign in we currently have no deployments that use the aws cloud builder in this account let's add a new deployment here we can choose either an arcgis enterprise deployment or a standalone arcgis server we're going to choose the default arcgis enterprise and click next we can now specify the number of machines to deploy in our arcgis enterprise deployment we will deploy a single machine we can also choose to deploy additional arcgis server roles from a generic rds server site geoanalytics notebook server and so on we also can add a spatial temporal data store at this time however we will just choose the single machine for this demo next we'll go ahead and choose the region that we want to deploy in aws in this case i'll select us west also i have the option of choosing a windows or ubuntu deployment let's deploy an ubuntu machine next we'll enter the name of our deployment this name will be used in the cloud formation stack name and the name of the ec2 instance being launched next we need to either select an existing vpc or create a new one let's let the builder create a new vpc for us we can enter the name of this vpc and we'll keep the defaults for the ip addresses in each range and click create with the vpc now created next we need to enter our key pair if one does not exist we can also create one from the wizard however i have this key pair that i have already created in my account we will choose that one next we need to provide our ssl certificate for our site we can either upload one directly with the builder or choose one that we have previously uploaded here i'm going to use our wildcard certificate that i have already loaded into the environment provide my password also i need to select the ip address that i'm going to use for my site and provide my site domain name validate you just need to make sure that your dns has been updated with your site domain name to the ip address shown above next we'll create the initial site admin account hit next now we need to choose the instance type we would like our machine to be running on we will choose an m52x large and we'll keep the default drive size next we need to choose our license files if this is the first time running the cloud builder you will need to upload these to the environment however i have already uploaded these and will choose the license files accordingly next i need to choose what type of configuration store if we hover over the icon here we can see that we need to choose the store for the portal content directory and the server configuration store we can either choose a cloud store or a file system since this is a single machine deployment i'm going to choose file system and choose next finally i can review the summary of the resources in my deployment the general parameters i can even look at my aws credentials the network parameters that include the vpc information and the arcgis enterprise environment parameters if i'm satisfied with all of these parameters i simply click create again the arcgis enterprise cloud builder for aws may take a few hours to complete but we have sped it up here to save time after choosing create we can also track the progress of the cloud builder in the aws console by signing into your aws account you can navigate to the cloudformation stack dashboard and here i'll click refresh as you can see this was the vpc that we created through the cloud builder it is now creating our base enterprise stack you can also review the files that have been uploaded using the cloud builder simply navigating to the s3 bucket dashboard you'll see a new bucket if this was the first time that you deployed using the cloud builder clicking on the bucket name you can see all of the resources that were used in the deployment if we open up the resource we can see that this is where the ssl certificate has been placed and also our licenses that were used within this deployment also we can look at the elastic ip that will be used in this deployment in the dashboard i like to add a tag called url to each one of the elastic ip addresses that we use i just tag it with the url of the ip address associated with each deployment we can also watch the instances being created as the cloud builder executes here we can see the ec2 instance being created now the cloud builder will be installing and configuring arcgis enterprise we just need to wait for it to finish all right the cloud builder has completed deploying arcgis enterprise in aws the outputs are the portal url and the server url since it is finished we'll simply click close we can now see our deployment on the main dashboard of the cloud builder we simply expand the deployment and see all of the information about our environment the create date the version we can even download the summary to navigate to the environment we can simply click on the link next to type this will bring us to our arcgis enterprise deployment now let's review the arcgis enterprise builder for azure to deploy in microsoft azure you must have your portal and arcgis server licenses ready you also should have your ssl certificate ready however the azure cloud builder does allow you to use a self-signed certificate the self-signed certificate should only be used for development or testing environments as in aws you must also enable programmatic deployments of arcgis images from the microsoft azure marketplace please be aware that at the 10 8 release the microsoft azure cloud builder has reconfigured the cloud architecture for arcgis deployments the new architecture is referred to as version 2 or v2 if you use the cloud builder prior to 108 those are referred to as version 1 or v1 you can still manage configure and upgrade the v1 deployments with the 108 release of the microsoft azure cloud builder this reference architecture shown here is for a v2 single tier based deployment notice we are now leveraging the azure application gateway as our single point of entry i will now deploy a v2 single tier based deployment using the new 108 microsoft azure cloud builder you can find additional information about the azure cloud builder by visiting the arcgis enterprise in the cloud and selecting the azure tab here you will find more information about the azure cloud builder including how to download it i have already downloaded and installed the microsoft azure cloud builder let's launch the cloud builder and sign in to my account the user signing into azure must have the proper permissions to deploy environments in microsoft azure as you can see my account is associated with two azure subscriptions i will select the geoxc subscription to deploy this 108 environment we currently have no deployments that used the azure cloud builder in this account so let's deploy a new site the builder gives you the option to either deploy an arcgis enterprise environment or a server role that is listed we will continue with the default selection to deploy an arcgis enterprise environment here we have the option to deploy an existing resource group or the builder allows us to create a new resource group we will create a new resource group for this demo and i will select the east us region and hit close we will then select the esri image from the marketplace the arcgis enterprise 10.8 we'll also be deploying this into the east u.s region here we have the option to have a single tier deployment or we can also add a secondary machine to our deployment we can also add a prefix to all the azure resources this will be displayed in the azure dashboard here we'll use the prefix uc and hit next now we need to either select an existing virtual network however since we deployed a new resource group we'll need to create a virtual network check the availability and we'll keep the default values and hit close here we need to select the created application gateway next we need to assign a domain name that be associated with the new ip address being requested and click next for our ssl certificate we can either use a self-signed certificate or import our existing certificate since i updated the dns to the domain name i can enter our domain name alias this is the url that will be used to access our environment i can now upload my pfx file and provide my password now i need to provide a machine administrator this will be used to rdp into the machine and i can also choose the size of the machine being deployed i will keep the default i can also set the time zone here we will keep the default utc and again for the name of our arcgis enterprise deployment will be called web gis dash pri for primary and we'll give this a prefix here now if we want to enable remote desktop access this will actually launch another jump box into our environment since we are unable to rdp into this our arcgis enterprise machine due to the application gateway to access from our local machine and here we have the option to include the tile cache data store or spatial temporal data store we will keep the default of relational now we need to supply our portal and server licenses and provide the initial site administrator user and also provide the user name that will run arcgis services on the windows machine just remember we need to provide a password that passes the windows security parameters now we'll add a storage account and we'll keep it within our resource group that we just created we also have the option to enable monitoring using the azure monitoring logs and also use additional cloud storage for our environment we will keep the defaults and continue on now i can review all the parameters that have entered into the builder to make sure everything is correct we can even generate a cost estimate of our environment depending on your subscription you can get different cost estimates by the type of account that you have we can look at a monthly cost a daily cost and even an hourly cost the next thing we do is click finish and let the builder complete our deployment also the arcgis enterprise cloud builder for azure generally takes a few hours but we have sped it up again to save time while the builder is deploying we can track the deployment progress by signing in to our microsoft azure dashboard here i have a filter for cloud builder let's hit refresh as you can see there's our cloud builder resource group that we created with the builder we can dive deeper into the resource group and view other items as they become available all right the cloud builder has completed deploying arcgis enterprise into our azure subscription we can either click here to browse to the site or simply hit close the arcgis enterprise cloud builder for microsoft azure dashboard displays our recently deployed site we can expand the site to see more details about the environment for example the deployed date and time the version and the role that we deployed we also have links to our environment let's click on our portal and signing in with the initial admin account that we created in the builder as you can see our arcgis enterprise deployment has been completed thanks mark in summary we've covered many topics including best practices of architecting york chess enterprise deployments and guidance in how to design your deployments the different options for deploying your arches enterprise deployments including arches enterprise builder purchase enterprise cloud builder for amazon web services and microsoft azure as well as using scripting with chef or powershell we've also reviewed not just how the automation tools work but specific characteristics of each tool and what is supported with each tool thanks for attending this session we hope you found this presentation helpful and in understanding deployment tools available and how they work we'll now start the question and answer portion of the presentation you

Channel: ArcGIS

Views: 1,214

Rating: 5 out of 5

Keywords: Esri, ArcGIS, GIS, Geographic Information System, ArcGIS Pro, ArcGIS Enterprise, Enterprise GIS, deployment, ArcGIS Enterprise deployment

Id: 8aOPR0oWJ80

Length: 38min 18sec (2298 seconds)

Published: Mon Oct 12 2020