OneDrive Office Hours | May 2025
May 14, 2025[In preview] Public Preview: Azure Virtual Network Manager high-scale private endpoints in connected groups
May 14, 2025
The architecture uses AKS to implement compute clusters of the applications that process high-volume batches of transactions. The applications receive the transactions in messages from Service Bus topics or queues. The topics and queues can be at Azure datacenters in different geographic regions, and multiple AKS clusters can read input from them.
Architecture
Workflow
The numbered circles in the diagram correspond to the numbered steps in the following list.
- The architecture uses Service Bus topics and queues to organize the batch processing input and to pass it downstream for processing.
- Azure Load Balancer, a Layer 4 (TCP, UDP) load balancer, distributes incoming traffic among healthy instances of services defined in a load-balanced set. Load balancing and management of connections optimize processing.
- The AKS cluster worker nodes listen to Service Bus queue endpoints for input.
- The Java nodes use Java Message Service to connect to Service Bus, and Java interfaces like Java Database Connectivity to connect to other data sources. They use other Java APIs as needed.
- The recoverable transactions run along with the business code for each batch step.
- The batch infrastructure uses Azure accelerated networking for speed.
- Azure Cache for Redis, Azure Cosmos DB, and Azure Stream Analytics provide working storage if needed.
- The permanent data layer uses Azure Data Factory for data integration and Azure SQL Managed Instance, business critical performance tier, for high availability. The permanent storage is loosely coupled for easy switching to other database technologies, and for optimization of storage organization (using shards or partitions, for example).
- The data solutions (transitional and permanent) use the Azure Storage geo-redundant storage (GRS) option to protect against catastrophic failures.
Components
The architecture uses these components:
- Azure Virtual Network provides a secure private network in the cloud. It can connect virtual machines (VMs) to one another, to the internet, and to on-premises networks.
- Azure ExpressRoute provides private connections between Azure datacenters and on-premises infrastructure.
- Azure Bastion provides private and fully managed RDP and SSH access to VMs.
- Azure Virtual Machines provides the flexibility of virtualization without having to provide and maintain the hardware that hosts it. The operating system choices include Windows and Linux.
- A VM created with accelerated networking uses single root I/O virtualization (SR-IOV), greatly improving its networking performance. For more information, see Create a Windows VM with accelerated networking using Azure PowerShell and Overview of Single Root I/O Virtualization (SR-IOV).
- An Azure network interface connects a VM to the internet, and to Azure and on-premises resources. As shown in this architecture, you can give each child VM its own network interface and IP address. For more information on network interfaces, see Create, change, or delete a network interface.
- Azure Managed Disks are high-performance, highly durable block storage for VMs. There are four disk storage options for the cloud: Ultra Disk Storage, Premium SSD, Standard SSD, and Standard HDD.
- Azure Kubernetes Service (AKS) is a fully managed Kubernetes service for deploying and managing containerized applications.
- Service Bus provides reliable cloud messaging as a service (MaaS) and simple hybrid integration.
- Azure load balancing services provides scaling for high availability and high performance. This architecture uses Load Balancer. It provides low-latency Layer 4 (TCP, UDP) load balancing capabilities to balance traffic between VMs, and across multi-tiered hybrid apps.
- Azure Cache for Redis is a lightning-fast and fully managed in-memory caching service for sharing data and state among compute resources.
- Azure Cosmos DB is a fast NoSQL database with open APIs for any scale.
- Azure Stream Analytics provides real-time analytics on fast-moving streams of data from applications and devices.
- Azure Databricks is a fast, easy, and collaborative big data analytics service based on Apache SparkTM.
- Azure SQL is a family of SQL cloud databases that provides a unified experience for your entire SQL portfolio, and a wide range of deployment options from edge to cloud.
- Azure SQL Managed Instance, part of the Azure SQL service portfolio, is a managed, secure, and always up-to-date SQL instance in the cloud.
- Data Factory is a fully managed and serverless data integration solution for preparing, and transforming all your data at scale.
- Data Factory supports the Parquet file data format. For more information, see Parquet format in Azure Data Factory.
- Log Analytics is a tool in the Azure portal used to edit and run log queries on Azure Monitor logs. For more information, see Overview of Log Analytics in Azure Monitor.
- The geo-redundant storage (GRS) option of Azure Storage copies your data synchronously three times within a single physical location in the primary region, then copies it asynchronously to a single physical location in the secondary region. For more information, see Azure Storage redundancy.
- Azure Blob Storage is massively scalable and secure REST-based object storage for cloud-native workloads, archives, data lakes, high-performance computing, and machine learning.
- Azure Files provides simple, secure, and serverless enterprise-grade file shares in the cloud. You use the industry-standard Server Message Block (SMB) and Network File System (NFS) protocols to access the shares.
Scenario details
On Azure, you can implement batch transaction processing—such as posting payments to accounts—by using an architecture based on Microsoft Azure Kubernetes Service (AKS) and Azure Service Bus. This type of architecture provides the transaction processing speed, scaling, and reliability required for high-volume batch processing.
Typically, a message remains queued until its transaction completes, allowing for recovery if there’s a failure. Also, you can replicate topics and queues to other regions, to share workloads and to continue processing even if a region fails.
Potential use cases
The solution is ideal for the finance, education, and science industries. This architecture is for high-volume processing of batches of transactions, especially independent transactions that can be processed in parallel. It’s therefore a likely candidate for use in migrating mainframe batch processing. Possible applications are:
- Processing of financial transactions, such as payroll, orders, and payments.
- Processing of experimental data gathered by scientific instruments.
- Other mainframe batch processing.
Considerations
These considerations implement the pillars of the Azure Well-Architected Framework, which is a set of guiding tenets that can be used to improve the quality of a workload. For more information, see Microsoft Azure Well-Architected Framework.
Reliability
Reliability ensures your application can meet the commitments you make to your customers. For more information, see Design review checklist for Reliability.
- Azure Site Recovery disaster recovery service protects against major outages. It’s dependable, cost-effective, and easy to deploy.
- Availability sets for VMs ensure that enough VMs are available to meet mission-critical batch process needs.
- Service Bus, AKS, and Azure SQL Managed Instance provide high availability and recoverability across geographic regions.
Security
Security provides assurances against deliberate attacks and the abuse of your valuable data and systems. For more information, see Design review checklist for Security.
- All the components within the Service Bus batch architecture work with Azure security components, such as Microsoft Entra ID, Virtual Network, and encryption.
Cost Optimization
Cost Optimization is about looking at ways to reduce unnecessary expenses and improve operational efficiencies. For more information, see Design review checklist for Cost Optimization.
To estimate costs for your implementation of this solution, use the Pricing calculator.
The autoscale features of AKS clusters—and other Azure Platform as a Service (PaaS) features that provide scaling on demand—keep costs at a minimum.
Here are pricing considerations for specific components:
- Most enterprises already have a Microsoft Active Directory implementation. If not, Microsoft Entra ID P1 or P2 is low cost.
- Windows VM pricing and Linux VM pricing depend on your compute capacity.
- For Premium SSD or Ultra managed storage disks pricing, see Managed Disks pricing.
- There are no upfront costs for Azure SQL Database; you pay for resources as used.
- For ExpressRoute, you pay a monthly port fee and outbound data transfer charges.
- Azure Storage costs depend on data redundancy options and volume.
- Azure Files pricing depends on many factors: data volume, data redundancy, transaction volume, and the number of file sync servers that you use.
- For SSD managed disk pricing, see Managed Disks pricing.
- For Site Recovery, you pay for each protected instance.
- These services are free with your Azure subscription, but you pay for usage and traffic:
- Load Balancer.
- Your activity run volume determines the cost of Data Factory.
- For Azure Virtual Network, IP addresses carry a nominal charge.
- Outbound data transfer volume determines Azure Bastion costs.
Operational Excellence
Operational Excellence covers the operations processes that deploy an application and keep it running in production. For more information, see Design review checklist for Operational Excellence.
- Azure Resource Manager templates (ARM templates) provide a configuration language to describe your resources in templates that you can use for scripted deployment. The templates also provide monitoring and alerting capabilities.
Performance Efficiency
Performance Efficiency is the ability of your workload to scale to meet the demands placed on it by users in an efficient manner. For more information, see Design review checklist for Performance Efficiency.
- The architecture is designed to accommodate parallel processing of independent transactions.
- Service Bus, AKS, and other Azure PaaS features provide high performance for transaction processing, computing, and data storage.
- Service Bus, AKS, and other Azure PaaS features dynamically scale as needed.
Next steps
- To learn more about AKS, read: Azure Kubernetes Service solution journey.
- To learn more about Service Bus, read: Service Bus queues, topics, and subscriptions.
Related resources
- Techniques used in this architecture:
- Azure Service Bus Geo-disaster recovery.
- Use geo-redundancy to design highly available applications.
- What are ARM templates?
- Azure reference architectures:
- Migrate IBM mainframe applications to Azure with TmaxSoft OpenFrame.
- Refactor IBM z/OS mainframe Coupling Facility (CF) to Azure.
- Micro Focus Enterprise Server on Azure VMs.
- Unisys mainframe migration.
The architecture uses AKS to implement compute clusters of the applications that process high-volume batches of transactions. The applications receive the transactions in messages from Service Bus topics or queues. The topics and queues can be at Azure datacenters in different geographic regions, and multiple AKS clusters can read input from them.
Architecture
Workflow
The numbered circles in the diagram correspond to the numbered steps in the following list.
- The architecture uses Service Bus topics and queues to organize the batch processing input and to pass it downstream for processing.
- Azure Load Balancer, a Layer 4 (TCP, UDP) load balancer, distributes incoming traffic among healthy instances of services defined in a load-balanced set. Load balancing and management of connections optimize processing.
- The AKS cluster worker nodes listen to Service Bus queue endpoints for input.
- The Java nodes use Java Message Service to connect to Service Bus, and Java interfaces like Java Database Connectivity to connect to other data sources. They use other Java APIs as needed.
- The recoverable transactions run along with the business code for each batch step.
- The batch infrastructure uses Azure accelerated networking for speed.
- Azure Cache for Redis, Azure Cosmos DB, and Azure Stream Analytics provide working storage if needed.
- The permanent data layer uses Azure Data Factory for data integration and Azure SQL Managed Instance, business critical performance tier, for high availability. The permanent storage is loosely coupled for easy switching to other database technologies, and for optimization of storage organization (using shards or partitions, for example).
- The data solutions (transitional and permanent) use the Azure Storage geo-redundant storage (GRS) option to protect against catastrophic failures.
Components
The architecture uses these components:
- Azure Virtual Network provides a secure private network in the cloud. It can connect virtual machines (VMs) to one another, to the internet, and to on-premises networks.
- Azure ExpressRoute provides private connections between Azure datacenters and on-premises infrastructure.
- Azure Bastion provides private and fully managed RDP and SSH access to VMs.
- Azure Virtual Machines provides the flexibility of virtualization without having to provide and maintain the hardware that hosts it. The operating system choices include Windows and Linux.
- A VM created with accelerated networking uses single root I/O virtualization (SR-IOV), greatly improving its networking performance. For more information, see Create a Windows VM with accelerated networking using Azure PowerShell and Overview of Single Root I/O Virtualization (SR-IOV).
- An Azure network interface connects a VM to the internet, and to Azure and on-premises resources. As shown in this architecture, you can give each child VM its own network interface and IP address. For more information on network interfaces, see Create, change, or delete a network interface.
- Azure Managed Disks are high-performance, highly durable block storage for VMs. There are four disk storage options for the cloud: Ultra Disk Storage, Premium SSD, Standard SSD, and Standard HDD.
- Azure Kubernetes Service (AKS) is a fully managed Kubernetes service for deploying and managing containerized applications.
- Service Bus provides reliable cloud messaging as a service (MaaS) and simple hybrid integration.
- Azure load balancing services provides scaling for high availability and high performance. This architecture uses Load Balancer. It provides low-latency Layer 4 (TCP, UDP) load balancing capabilities to balance traffic between VMs, and across multi-tiered hybrid apps.
- Azure Cache for Redis is a lightning-fast and fully managed in-memory caching service for sharing data and state among compute resources.
- Azure Cosmos DB is a fast NoSQL database with open APIs for any scale.
- Azure Stream Analytics provides real-time analytics on fast-moving streams of data from applications and devices.
- Azure Databricks is a fast, easy, and collaborative big data analytics service based on Apache SparkTM.
- Azure SQL is a family of SQL cloud databases that provides a unified experience for your entire SQL portfolio, and a wide range of deployment options from edge to cloud.
- Azure SQL Managed Instance, part of the Azure SQL service portfolio, is a managed, secure, and always up-to-date SQL instance in the cloud.
- Data Factory is a fully managed and serverless data integration solution for preparing, and transforming all your data at scale.
- Data Factory supports the Parquet file data format. For more information, see Parquet format in Azure Data Factory.
- Log Analytics is a tool in the Azure portal used to edit and run log queries on Azure Monitor logs. For more information, see Overview of Log Analytics in Azure Monitor.
- The geo-redundant storage (GRS) option of Azure Storage copies your data synchronously three times within a single physical location in the primary region, then copies it asynchronously to a single physical location in the secondary region. For more information, see Azure Storage redundancy.
- Azure Blob Storage is massively scalable and secure REST-based object storage for cloud-native workloads, archives, data lakes, high-performance computing, and machine learning.
- Azure Files provides simple, secure, and serverless enterprise-grade file shares in the cloud. You use the industry-standard Server Message Block (SMB) and Network File System (NFS) protocols to access the shares.
Scenario details
On Azure, you can implement batch transaction processing—such as posting payments to accounts—by using an architecture based on Microsoft Azure Kubernetes Service (AKS) and Azure Service Bus. This type of architecture provides the transaction processing speed, scaling, and reliability required for high-volume batch processing.
Typically, a message remains queued until its transaction completes, allowing for recovery if there’s a failure. Also, you can replicate topics and queues to other regions, to share workloads and to continue processing even if a region fails.
Potential use cases
The solution is ideal for the finance, education, and science industries. This architecture is for high-volume processing of batches of transactions, especially independent transactions that can be processed in parallel. It’s therefore a likely candidate for use in migrating mainframe batch processing. Possible applications are:
- Processing of financial transactions, such as payroll, orders, and payments.
- Processing of experimental data gathered by scientific instruments.
- Other mainframe batch processing.
Considerations
These considerations implement the pillars of the Azure Well-Architected Framework, which is a set of guiding tenets that can be used to improve the quality of a workload. For more information, see Microsoft Azure Well-Architected Framework.
Reliability
Reliability ensures your application can meet the commitments you make to your customers. For more information, see Design review checklist for Reliability.
- Azure Site Recovery disaster recovery service protects against major outages. It’s dependable, cost-effective, and easy to deploy.
- Availability sets for VMs ensure that enough VMs are available to meet mission-critical batch process needs.
- Service Bus, AKS, and Azure SQL Managed Instance provide high availability and recoverability across geographic regions.
Security
Security provides assurances against deliberate attacks and the abuse of your valuable data and systems. For more information, see Design review checklist for Security.
- All the components within the Service Bus batch architecture work with Azure security components, such as Microsoft Entra ID, Virtual Network, and encryption.
Cost Optimization
Cost Optimization is about looking at ways to reduce unnecessary expenses and improve operational efficiencies. For more information, see Design review checklist for Cost Optimization.
To estimate costs for your implementation of this solution, use the Pricing calculator.
The autoscale features of AKS clusters—and other Azure Platform as a Service (PaaS) features that provide scaling on demand—keep costs at a minimum.
Here are pricing considerations for specific components:
- Most enterprises already have a Microsoft Active Directory implementation. If not, Microsoft Entra ID P1 or P2 is low cost.
- Windows VM pricing and Linux VM pricing depend on your compute capacity.
- For Premium SSD or Ultra managed storage disks pricing, see Managed Disks pricing.
- There are no upfront costs for Azure SQL Database; you pay for resources as used.
- For ExpressRoute, you pay a monthly port fee and outbound data transfer charges.
- Azure Storage costs depend on data redundancy options and volume.
- Azure Files pricing depends on many factors: data volume, data redundancy, transaction volume, and the number of file sync servers that you use.
- For SSD managed disk pricing, see Managed Disks pricing.
- For Site Recovery, you pay for each protected instance.
- These services are free with your Azure subscription, but you pay for usage and traffic:
- Load Balancer.
- Your activity run volume determines the cost of Data Factory.
- For Azure Virtual Network, IP addresses carry a nominal charge.
- Outbound data transfer volume determines Azure Bastion costs.
Operational Excellence
Operational Excellence covers the operations processes that deploy an application and keep it running in production. For more information, see Design review checklist for Operational Excellence.
- Azure Resource Manager templates (ARM templates) provide a configuration language to describe your resources in templates that you can use for scripted deployment. The templates also provide monitoring and alerting capabilities.
Performance Efficiency
Performance Efficiency is the ability of your workload to scale to meet the demands placed on it by users in an efficient manner. For more information, see Design review checklist for Performance Efficiency.
- The architecture is designed to accommodate parallel processing of independent transactions.
- Service Bus, AKS, and other Azure PaaS features provide high performance for transaction processing, computing, and data storage.
- Service Bus, AKS, and other Azure PaaS features dynamically scale as needed.
Next steps
- To learn more about AKS, read: Azure Kubernetes Service solution journey.
- To learn more about Service Bus, read: Service Bus queues, topics, and subscriptions.
Related resources
- Techniques used in this architecture:
- Azure Service Bus Geo-disaster recovery.
- Use geo-redundancy to design highly available applications.
- What are ARM templates?
- Azure reference architectures:
- Migrate IBM mainframe applications to Azure with TmaxSoft OpenFrame.
- Refactor IBM z/OS mainframe Coupling Facility (CF) to Azure.
- Micro Focus Enterprise Server on Azure VMs.
- Unisys mainframe migration.