Deploy APEX Protection Storage for Microsoft Azure (DDVE) from the Azure Marketplace using the following steps:
- Log in to the Azure portal.
- Search for DDVE to find APEX Protection Storage for Microsoft Azure (DDVE) in Azure Marketplace.
- Select a software plan (DDOS version) and begin the deployment.
- On the Basic page, configure basic information for the DDVE:
- Resource Group: Specify the resource group for your DDVE.
- Virtual machine name: Enter a name for DDVE. The maximum length is ten characters. For Azure Gov Cloud, the maximum length is six characters.
- Region: For better performance, ensure that DDVE and the storage account are in the same region. Also create a separate storage account for each DDVE.
- Availability options: By default, no infrastructure redundancy required is selected. You can select other options that are based on your infrastructure requirements. For details, see https://docs.microsoft.com/en-us/azure/virtual-machines/linux/availability.
- Images: This option shows the selected DDOS version.
- Azure Spot instance: Select No. DDVE does not support the Azure spot instance. For details, see https://docs.microsoft.com/en-us/azure/virtual-machines/linux/spot-vms.
- Size: Specify the DDVE instance type based on the capacity. Select Standard_D4ds_v5, Standard_D8ds_v5, Standard_D16ds_v5 or Standard_D32ds_v5.
- Authentication type: SSH public key and password authentication are supported. SSH public key authentication forces a password change at first login.
- Username: Enter sysadmin.
- SSH public key: Copy and paste the SSH public key.
- Password: Enter the password for sysadmin.
- Public inbound ports: Select Allow selected ports.
- Select inbound port: According to your IT and networking practices, you can select "HTTP (80), HTTPS (443), SSH (22)" to enable the SSH and UI access to your DDVE.
- On the Disks page, configure the disk storage for the DDVE.
- OS disk type: Select Standard HDD or Premium SSD based on your requirements.
- Encryption Type: Select (Default) Encryption at-rest with a platform-managed key. If you want to encrypt the disk at-rest with your own managed key, see https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption.
- Enable Ultra Disk compatibility: Select No. DDVE does not support this option. For more details, see https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disks-types#ultra-disk.
- Host Caching: Select None.
- For Data Disks, NVRAM disk is added automatically during deployment. Metadata disks can be added after deployment.
- On the Networking page, define network connectivity for the DDVE.
- Virtual network: Specify the VNet for the DDVE.
- Subnet: Specify the VNet for the DDVE.
- Public IP: For security, deploying DDVE in a private subnet and leaving the public IP address as None is recommended.
- NIC network security group: Configure it as your network setup.
- Public inbound ports: Select Allow selected ports.
- Select inbound ports: According to your IT and networking practices, you can select "HTTP (80), HTTPS (443), SSH (22)" to enable the SSH and UI access to the DDVE.
- Accelerated networking: Select Off.
- Load balancing: Select No.
- On the Management page, configure monitoring and management options for DDVE.
- Boot diagnostics: Select On if you want to capture the serial console output of the DDVE to help diagnose a startup issue.
- System assigned managed Identify: Select Off.
- Enable auto-shutdown: Select Off.
- On the Advanced page, this version of the DDVE does not support these options.
- On the Tags page, you can create or assign a tag to the DDVE from a resource management and billing perspective.
- On the Review+Create page, verify that the configuration summary for creating the DDVE is correct.
- Click Create.
The Azure portal starts the DDVE deployment. When the deployment finishes, you can find the DDVE in your resource group.