You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/modeling-simulation-workbench/concept-chamber.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ ms.date: 01/01/2023
11
11
---
12
12
# Chambers in the Azure Modeling and Simulation Workbench
13
13
14
-
In the Azure Modeling and Simulation Workbench, Chambers are a security boundary for a group virtual machines (VM) (nodes) and share common users. A Chamber provides a full-featured and secure environment for users to run engineering applications and workloads together in isolation. Chamber VMs are all on the same subnet and have no internet access.
14
+
In the Azure Modeling and Simulation Workbench, chambers are a security boundary for a group virtual machines (VM) (nodes) and share common users. A chamber provides a full-featured and secure environment for users to run engineering applications and workloads together in isolation. chamber VMs are all on the same subnet and have no internet access.
15
15
16
16
## Key features
17
17
@@ -21,25 +21,25 @@ In the Azure Modeling and Simulation Workbench, Chambers are a security boundary
21
21
22
22
## Chamber environment
23
23
24
-
Chambers create a secure and isolated environment by adding private IP access and removing internet access. Public domain access is restricted to authorized networks over encrypted sessions enabled by the connector component. A [Connector](./concept-connector.md) exists per chamber that supports the protocols established through VPN, Azure Express Route, or allowlisted Public IP addresses.
24
+
Chambers create a secure and isolated environment by adding private IP access and removing internet access. Public domain access is restricted to authorized networks over encrypted sessions enabled by the connector component. A [connector](./concept-connector.md) exists per chamber that supports the protocols established through VPN, Azure Express Route, or allowlisted Public IP addresses.
25
25
26
-
Only provisioned users can access the chamber environment. User provisioning is done at the Chamber level using Azure's [Identity Access Management](/azure/role-based-access-control/role-assignments-portal). This enables cross-team and/or cross-organization collaboration on the same projects through Chambers. Multifactor authentication (MFA) enabled through Microsoft Entra ID is recommended to enhance your organization's security.
26
+
Only provisioned users can access the chamber environment. User provisioning is done at the chamber level using Azure's [Identity Access Management](/azure/role-based-access-control/role-assignments-portal). This enables cross-team and/or cross-organization collaboration on the same projects through chambers. Multifactor authentication (MFA) enabled through Microsoft Entra ID is recommended to enhance your organization's security.
27
27
28
28
## Chamber storage
29
29
30
-
Users can resize and tailor the chambers to support storage requirement needs throughout the design process. Chamber users can also allocate Chamber VMs on demand, select the right-sized VM/CPU for the task/job at hand, and decommission the workload when the job is done to save costs.
30
+
Users can resize and tailor the chambers to support storage requirement needs throughout the design process. Chamber users can also allocate chamber VMs on demand, select the right-sized VM/CPU for the task/job at hand, and decommission the workload when the job is done to save costs.
31
31
32
32
### Cost optimization
33
33
34
34
Administrators can optimize their resource consumption without necessarily destroying resources or moving data by:
35
35
36
36
* Managing the size and number of virtual machines.
37
-
*[Idling](./how-to-guide-idle.md) unused Connectors and Chambers to reduce cost without deleting VMs or storage.
38
-
* Managing the size and performance tier of Chamber storages.
37
+
*[Idling](./how-to-guide-idle.md) unused connectors and chambers to reduce cost without deleting VMs or storage.
38
+
* Managing the size and performance tier of chamber storages.
39
39
40
40
Learn more about reducing service costs using [Azure Advisor](/azure/advisor/advisor-cost-recommendations#optimize-spend-for-mariadb-mysql-and-postgresql-servers-by-right-sizing) and [right-size VMs best practices](/azure/cloud-adoption-framework/migrate/azure-best-practices/migrate-best-practices-costs#best-practice-right-size-vms).
41
41
42
42
## Next steps
43
43
44
44
> [!div class="nextstepaction"]
45
-
> [Create a Chamber VM](./how-to-guide-chamber.md)
45
+
> [Create a chamber VM](./how-to-guide-chamber.md)
Copy file name to clipboardExpand all lines: articles/modeling-simulation-workbench/concept-connector.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,25 +12,25 @@ ms.date: 01/01/2023
12
12
---
13
13
# Connectors in Azure Modeling and Simulation Workbench
14
14
15
-
Connectors define the network access method between users and the Azure Modeling and Simulation Workbench Chamber. Connectors support connectivity through allowlisted public IPs, VPN, or Azure ExpressRoute. A Chamber can have only one Connector configured at a time. Connectors also configure copy-paste functionality into Chamber VMs. Connector types are immutable and once created can't be changed to another access model. Connectors are part of the Idle mode setting to reduce cost.
15
+
Connectors define the network access method between users and the Azure Modeling and Simulation Workbench chamber. Connectors support connectivity through allowlisted public IPs, VPN, or Azure ExpressRoute. A chamber can have only one connector configured at a time. Connectors also configure copy-paste functionality into chamber VMs. Connector types are immutable and once created can't be changed to another access model. Connectors are part of the Idle mode setting to reduce cost.
16
16
17
17
## Public IP access via allowlist
18
18
19
-
The Workbench can be built to allow users to connect directly from the internet, allowing flexible, open access. When a Public IP Connection is built, connections are permitted using an allowlist. The allowlist uses CIDR (Classless Interdomain Routing) notation to conveniently manage access from large network ranges, such as conference centers or corporate exit nodes. Only IPs listed in the allowlist are able to make connections to its associated Chamber.
19
+
The Workbench can be built to allow users to connect directly from the internet, allowing flexible, open access. When a Public IP Connection is built, connections are permitted using an allowlist. The allowlist uses CIDR (Classless Interdomain Routing) notation to conveniently manage access from large network ranges, such as conference centers or corporate exit nodes. Only IPs listed in the allowlist are able to make connections to its associated chamber.
20
20
21
21
## Private Azure networking
22
22
23
-
A Connector can be created for private network access from Azure virtual networks. This method is best suited where a private or controlled connection is required. Azure ExpressRoutes provide a dedicated connection from an on-premises infrastructure to an Azure data center and can be peered to the Workbench. With a VPN gateway, the Workbench can use a private network with extra encryption layers.
23
+
A connector can be created for private network access from Azure virtual networks. This method is best suited where a private or controlled connection is required. Azure ExpressRoutes provide a dedicated connection from an on-premises infrastructure to an Azure data center and can be peered to the Workbench. With a VPN gateway, the Workbench can use a private network with extra encryption layers.
24
24
25
25
### VPN
26
26
27
-
A VPN Connector can be created which deploys infrastructure specifically for VPN access. The VPN Connector is required if the Chamber is accessed through a point-to-site or site-to-site VPN.
27
+
A VPN connector can be created which deploys infrastructure specifically for VPN access. The VPN connector is required if the chamber is accessed through a point-to-site or site-to-site VPN.
28
28
29
29
### Azure ExpressRoute
30
30
31
-
[Azure ExpressRoute](/azure/expressroute/expressroute-introduction) provides secure, dedicated, encrypted connectivity from on-premises to an Azure landing zone. A Workbench Owner must create a Connector expressly for ExpressRoute, providing the necessary virtual network, supporting network infrastructure, and peer the appropriate vnets.
31
+
[Azure ExpressRoute](/azure/expressroute/expressroute-introduction) provides secure, dedicated, encrypted connectivity from on-premises to an Azure landing zone. A Workbench Owner must create a connector expressly for ExpressRoute, providing the necessary virtual network, supporting network infrastructure, and peer the appropriate vnets.
32
32
33
33
## Next step
34
34
35
35
> [!div class="nextstepaction"]
36
-
> [Create a Connector](./how-to-guide-set-up-networking.md)
36
+
> [Create a connector](./how-to-guide-set-up-networking.md)
Copy file name to clipboardExpand all lines: articles/modeling-simulation-workbench/concept-data-pipeline.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,9 +24,9 @@ Users with access to the chamber can bring data into the chamber via AzCopy and
24
24
25
25
Users with access to the chamber can export data from the chamber via the data pipeline.
26
26
27
-
1.**Identify file to export.** The export process is triggered when a user places a file to export into a designated area within the chamber. A Chamber Admin or Chamber User copies the file to the data out folder within the pipeline. The data pipeline detects the copied file and creates a file object. The file creation activity is traceable in the logs and enables the next step of the data pipeline.
27
+
1.**Identify file to export.** The export process is triggered when a user places a file to export into a designated area within the chamber. A chamber Admin or chamber User copies the file to the data out folder within the pipeline. The data pipeline detects the copied file and creates a file object. The file creation activity is traceable in the logs and enables the next step of the data pipeline.
28
28
29
-
1.**Request file to export.** A Chamber Admin reviews files staged in the data pipeline and requests to export. The pipeline manager creates a file request object. The export request activity is traceable in the logs and enables the next step of the data pipeline.
29
+
1.**Request file to export.** A chamber Admin reviews files staged in the data pipeline and requests to export. The pipeline manager creates a file request object. The export request activity is traceable in the logs and enables the next step of the data pipeline.
30
30
31
31
1.**Approve/reject export request.** The Workbench Owner either approves or rejects the export file request. Only a Workbench Owner can approve or reject requests. The individual who approves or denies can't be the same person who initially requested the export.
Copy file name to clipboardExpand all lines: articles/modeling-simulation-workbench/concept-storage.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,32 +15,32 @@ The Modeling and Simulation Workbench offers several tiers of storage classes. T
15
15
16
16
## Local storage on VMs
17
17
18
-
Depending on the [Virtual Machine (VM) selected](./concept-vm-offerings.md), local temporary storage might not be available. Modeling and Simulation Workbench doesn't have controls for specifying data and OS disks as in conventional Azure VMs. Since VMs are frequently created and deleted, Microsoft recommends that users install applications and workspaces to the Chamber or Shared Storage volume to improve reliability. Chamber and Shared Storages are high-performance and high-reliability volumes based on Azure NetApp Files.
18
+
Depending on the [Virtual Machine (VM) selected](./concept-vm-offerings.md), local temporary storage might not be available. Modeling and Simulation Workbench doesn't have controls for specifying data and OS disks as in conventional Azure VMs. Since VMs are frequently created and deleted, Microsoft recommends that users install applications and workspaces to the chamber or Shared Storage volume to improve reliability. Chamber and Shared Storages are high-performance and high-reliability volumes based on Azure NetApp Files.
19
19
20
20
## Chamber-tier storage
21
21
22
-
Chamber-accessible storage is accessible across the entire Chamber, its VMs, and users. Chamber-tier storage has three classes: user home directories, data pipeline mount points, and Chamber Storage.
22
+
Chamber-accessible storage is accessible across the entire chamber, its VMs, and users. Chamber-tier storage has three classes: user home directories, data pipeline mount points, and chamber Storage.
23
23
24
24
### User home directories
25
25
26
-
The conventional Linux `/home` directory is mounted at `/mount/sharedhome`. The `/mount/sharedhome` is a single volume accessible across all Chamber VMs and isn't accessible outside the Chamber. This volume isn't high-performance and users are discouraged from attempting to install large files or operate intense workloads there. This directory is intended for user resource (rc), configuration, and small private directories.
26
+
The conventional Linux `/home` directory is mounted at `/mount/sharedhome`. The `/mount/sharedhome` is a single volume accessible across all chamber VMs and isn't accessible outside the chamber. This volume isn't high-performance and users are discouraged from attempting to install large files or operate intense workloads there. This directory is intended for user resource (rc), configuration, and small private directories.
27
27
28
28
### Data pipeline mount points
29
29
30
30
The data pipeline file structure has two directories: `/mount/datapipeline/datain` where imported data is staged and `/mount/datapipeline/dataout` where file exports are staged for file requests. This volume is large to accommodate large file imports and exports but files shouldn't be stored here long term. This mount is only for data import and export operations and isn't high-performance.
31
31
32
32
### Chamber Storage
33
33
34
-
Chamber Storage is the high-performance, high-capacity storage solution for use within Chambers. Based on Azure NetApp Files, it's available in two high-performance tiers, and dynamically scalable after creation. Chamber Storage can be accessed at `/mount/chamberstorages` where a different directory exists for each created volume. Volumes are sizable in 4 TB increments up to the user's subscription quota.
34
+
Chamber Storage is the high-performance, high-capacity storage solution for use within chambers. Based on Azure NetApp Files, it's available in two high-performance tiers, and dynamically scalable after creation. chamber Storage can be accessed at `/mount/chamberstorages` where a different directory exists for each created volume. Volumes are sizable in 4 TB increments up to the user's subscription quota.
35
35
36
36
> [!TIP]
37
-
> Users are encouraged to place all working directories and point all application runs at a Chamber Storage volume for increased performance and data reliablity.
37
+
> Users are encouraged to place all working directories and point all application runs at a chamber Storage volume for increased performance and data reliablity.
38
38
39
39
## Workbench tier Shared Storage
40
40
41
-
Shared Storage is accessible across select Chambers in a Workbench. With each Shared Storage volume, you specify which Chambers have access to the volume. Shared Storage volumes appear under the `/mount/sharedstorage` mount point in every VM in the Chamber to which access was granted.
41
+
Shared Storage is accessible across select chambers in a Workbench. With each Shared Storage volume, you specify which chambers have access to the volume. Shared Storage volumes appear under the `/mount/sharedstorage` mount point in every VM in the chamber to which access was granted.
42
42
43
-
To enable secure cross team and/or cross-enterprise collaboration, a Shared Storage resource allows for selective data sharing between Chambers. Shared Storage is built on Azure NetApp Files storage volumes and is available to deploy in multiples of 4 TB. Workbench owners can create multiple shared storage instances on demand and dynamically link them to existing Chambers to facilitate collaboration.
43
+
To enable secure cross team and/or cross-enterprise collaboration, a Shared Storage resource allows for selective data sharing between chambers. Shared Storage is built on Azure NetApp Files storage volumes and is available to deploy in multiples of 4 TB. Workbench owners can create multiple shared storage instances on demand and dynamically link them to existing chambers to facilitate collaboration.
44
44
45
45
Users who are provisioned to a specific chamber can access all shared storage volumes linked to that chamber. Once users get deprovisioned from a chamber or that chamber gets deleted, they lose access to any linked shared storage volumes.
46
46
@@ -53,10 +53,10 @@ Users who are provisioned to a specific chamber can access all shared storage vo
53
53
**Management**: Workbench Owners can manage storage capacity, resize storage, and change performance tiers through the Azure portal.
54
54
55
55
> [!IMPORTANT]
56
-
> All members of a Chamber have access to a Shared Storage resource once that Chamber has been granted access to the storage volume. Do not place any data in Shared Storage that you do not wish to share with all members of that Chamber. Create a separate Chamber for select users if access needs to be restricted.
56
+
> All members of a chamber have access to a Shared Storage resource once that chamber has been granted access to the storage volume. Do not place any data in Shared Storage that you do not wish to share with all members of that chamber. Create a separate chamber for select users if access needs to be restricted.
Copy file name to clipboardExpand all lines: articles/modeling-simulation-workbench/concept-user-personas.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,7 +20,7 @@ The IT Admin is responsible for infrastructure deployment and user provisioning,
20
20
21
21
A Workbench Owner can create and delete chambers, and invite, remove, or change user roles. They can also define the connectivity methods that their users employ to connect into the workload. The Workbench Owner is also responsible for approving all data export requests and costs accrued by resource consumption during workbench usage.
22
22
23
-
## Project Manager (Chamber Admin)
23
+
## Project Manager (chamber Admin)
24
24
25
25
The Project Manager, also known as the *Chamber Admin*, is responsible for installing and managing applications and licenses. They also own the installation and configuration of tools related to compute, network, and storage within the chamber. Chamber Admins set up and manage the chamber and have a higher elevated access within the workloads and the environment. They're responsible for procuring the licenses from the software vendors to enable design teams to run simulations on the deployed workloads.
Copy file name to clipboardExpand all lines: articles/modeling-simulation-workbench/concept-vm-offerings.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,7 +21,7 @@ VM quotas in Modeling and Simulation Workbench are handled differently than in t
21
21
22
22
## General purpose
23
23
24
-
General purpose VM sizes provide balanced CPU-to-memory ratio. Ideal for testing and development, small to medium databases, and low to medium traffic web servers. They make ideal management VMs for managing Chambers, Facilitating file imports or exports, compiling applications, or installing applications to shared storage.
24
+
General purpose VM sizes provide balanced CPU-to-memory ratio. Ideal for testing and development, small to medium databases, and low to medium traffic web servers. They make ideal management VMs for managing chambers, Facilitating file imports or exports, compiling applications, or installing applications to shared storage.
25
25
26
26
### Dv4-series
27
27
@@ -101,4 +101,4 @@ M-series VMs have fixed-size temporary storage.
101
101
## Next step
102
102
103
103
> [!div class="nextstepaction"]
104
-
> [Create a Chamber VM](./how-to-guide-chamber-vm.md)
104
+
> [Create a chamber VM](./how-to-guide-chamber-vm.md)
0 commit comments