Latest Contributions by danbecker

I had a different thread I was updating: Azure Files premium file share - SLOW File Geodata... - Esri Community Yes, absolutely upgrade to NetApp files, you will not be disappointed. But, also note that we found performance still lacking until our AVD session hosts were Entra ID joined; and Kerberos authentication to the NetApp volume was configured.  Traditional AD-joined AVD session hosts still had issues with NetApp performance, the machines would seemingly drop the NetApp volume connection, which caused Pro to display "General Function Failure" when accessing an attribute table of a FGDB layer, that was stored on the NetApp volume.  ... View more

We deployed a new Azure Virtual Desktop host pool that only contained Entra ID joined session host VMs, same NVIDIA GPUs. upgraded to Pro 3.2. Since the VMs were no longer AD joined, we had to migrate all the AD Group Policy Objects to InTune, which really wasn't that difficult given the GPO import tools in InTune. FsLogix profile containers were switched away from Azure Files Premium and are being stored in an Azure NetApp Volume, just like our GIS file-based data.  Entra ID-joined session hosts can only authenticate with SMB shares using Kerberos authentication, not NTLM (on-prem AD). So, Kerberos auth. and ACLs (permissions) were configured per Azure docs. for both the NetApp \profile and \gis volumes.  For the results: ALL PROBLEMS ARE SOLVED!  Added bonus is that all MS office apps, including the Remote Desktop client are SSO using Entra ID (cloud) credentials. The VMs, Pro, and FGDB access is 100% improved.  I wish I had a better explanation, but our problems with FGDB performance in AVD was 100% caused by authentication issues with traditional on-prem AD (which was a VM in Azure, not really on-prem).  With the sputtering/performance issues resolved, I have no doubt that better performance could be achieved by increasing the NetApp capacity pool quota (i.e. monthly A$ure invoice). Our current cap. pool quota is 2TB which comes with 128 MiB/s throughput, divided how ever we want between \profile and \gis volumes. Another 1TB would add +64 MiB/s throughput.  Azure NetApp is quite amazing, so simple.  ... View more

We deployed a new Azure Virtual Desktop host pool that contains NVIDIA GPUs and Pro 3.2.1. This general function failures STILL happen, only when accessing FGDBs stored in Azure NetApp files. Anyone experience this, ESRI, any advice here? ... View more

I can't believe this isn't documented, or discussed more..? We abandoned Azure Files and deployed an Azure NetApp Files 2TB smb volume, premium tier. Throughput given that tier and volume size is 128 MiB/s, equivalent to an on-prem 1000 Mbps network.    And, the performance shows, Id say it's faster then our 10k RPM SSD SATA disks on a 1000mbos network.   This is our identical architecture: https://learn.microsoft.com/en-us/azure/architecture/example-scenario/data/esri-arcgis-azure-virtual-desktop The only issue we have are random "general function failures" in Pro 3.1.2. Happens when the project is using FGDBs. SDE GDBs and you never get that failure. I'd say that error was happening 1-4 times /hr on Azure Files, and now once per day on NetApp files. It seems to happen when you open an attribute table. There's no way for Pro to recover, nothing draws, ect until you close Pro, then re-open..back to normal. So close to a REALLY nice, highly scalable virtual platform.  ... View more

I have this same question. Background: we've been using Azure Virtual Desktop (VD; Win10 multi-session host), FsLogix user profiles are stored in Azure Files share. So far, Pro has worked great in the VD environmetn, EXCEPT our "GIS" file share for FGDBs, Pro Projects, ect. The "GIS" file share was configured as a Premium Azure Files storage account in the same Azure region (Azure GOV Virginia) as the VDs, smb multi-channel enabled. AD DS authentication is enabled, VD machines and storage account are all AD joined, they both have line of sight to Domain Controller. Opening Pro projects stored in Azure Files is painful, so too are field calculations. Just opening the field calculation tool takes 5-10 seconds for it to fully populate all controls. If the Pro project and FGDB is copied to a local, managed drive, everything is 10x faster. Our Azure deployment is configured according to this doc, EXCEPT for Azure NetApp files. Our IT consultant told us "it shouldn't matter" if we used Azure Files instead. https://learn.microsoft.com/en-us/azure/architecture/example-scenario/data/esri-arcgis-azure-virtual-desktop Anyone have recommendations? Should we just switch to NetApp files? ... View more

We just created an Az db for Postgres -Single server instance for Enterprise gdb storage.   Using PGAdmin, I logged in as postgres_admin, then created an sde user that does not have super user permission. I then created a db, with sde user as owner. In Pro 3.1, I connect to the db as sde user, then run the Enable Enterprise Geodatabase tool. I then created dbo user using the Create database user tool, connect as dbo in Pro and start creating FCs. Im seeing 2x performance/speed with the managed instance compared to our 4-cpu 32gb memory Linux Ubuntu Azure VM.  ... View more

The only advise I have is to not mix Linux/Windows OSs in an ArcGIS Enterprise stack. I wish this would be added to the Enterprise install documentation. We currently run Portal and Datastore on Linux Ubuntu 20.04 VMs and Server on Windows. This prohibits us from using the webgisDr backup utility, REST /exportSite, REST /importSite or Join-Site methods of migration. I.e. we cannot move our Enterprise stack to Azure (all Windows), without manually scripting a solution in Python. ... View more

"source": "https://ourdomain.com/portal/sharing/servers/8227a14cb3704f4bba79df3963bf297c/rest/services/World_Imagery/MapServer", "error": "{\"code\": 35, \"messageCode\": \"OffPkg_ 35\", \"message\": \"Export tile operation https://tiledbasemaps.arcgis.com/arcgis/rest/directories/arcgisoutput/World_Imagery_MapServer/_ags1642778840_ch failed error {\\\"code\\\": 30, \\\"messageCode\\\": \\\"OffPkg_ 30\\\", \\\"message\\\": \\\"Accessing url https://tiledbasemaps.arcgis.com/arcgis/rest/directories/arcgisoutput/World_Imagery_MapServer/_ags1642778840_ch?token=longtokenhere.. returned error <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)>\\\", \\\"params\\\": {\\\"url\\\": \\\"https://tiledbasemaps.arcgis.com/arcgis/rest/directories/arcgisoutput/World_Imagery_MapServer/_ags1642778840_ch?token=longtoken..   New Enterprise site on Azure is having above issues when generating offline areas. Is this a cert. trust issue between our Server machine and https://tiledbasemaps.arcgis.com? ... View more

Our Enterprise deployment of Portal (Linux), Datastore (Linux), Postgres (Linux) and Server/webadaptor (Win) is NOT recommended for anyone reading this. There's not an out of the box method of migrating Enterprise site/data with mixed OS. webgisdr - not an option since the backup operation must access the same file share across all VMs. Lin/Win UNC paths are different. REST export/importSite - not an option since importSite also restores all site settings on the target VMs, so they have to be the same OS the backup was taken from. Azure Enterprise VMs are all windows. Enterprise components installed on separate VMs (new local domain names as well). Using hosts file edits on the VMs, Azure Server machine was federated with the same production.domain.com alias as used on-prem. In order to use ArcGIS API for Python to copy data between sites, both sites had to be accessible, so Azure webadaptors were configured with newsite.domain.com DNS alias. Public DNS A-record for newsite.domain.com was created, pointing to Azure Web App Gateway. I noticed that attempting to login to Azure server manager via internal.domain.com:6443, you're redirected to federated URL (production.domain.com) to login, again a hosts file manipulation so that Azure site handles the request. ArcGIS API for Python is the only method of migrating content, I'm using these examples: https://developers.arcgis.com/python/samples/clone-portal-users-groups-and-content-rn/ Users and groups were easy. Web maps were also copied, but I'm noticing the feature service layers (none are hosted, all are referenced) in web maps point to newsite.domain.com?id=guidFromProductionItem So, when I used the above python GIS.content.add() method to move the feature services, I specified item_id=guidFromProductionItem. Now the feature services in Azure have the same itemID, but the referenced REST service (production.domain.com/server) is obliviously not created. Using Pro, I attempted to overwrite the Portal feature service that I had copied using Python, but that doesn't work, error: unable to retrieve server details. That makes sense because the services doesn't actually exist in Azure. So, I published a new feat. service from Pro using the same folder/serviceName, but this creates a duplicate feature service item in the Portal. Any pointers here? Can you publish services from Pro, and not create a Portal Item in the federated portal? That workflow is accomplished via Python GIS.content.add() since we need to maintain the itemID. The good news is that the web maps that were copied using Python work without issue after the service is published to Azure. Webmaps contain the old layer references (id=guidFromProductionItem), which were moved to Azure, which point to the newly published Feat Service, so all is well. But, I have that duplicate portal feature service item? If I delete it in Portal, then the server service is also deleted. It's like I need to delete the Pro-created feat service Portal Item, then link the service to the feat service Portal Item that I copied with python. Is this possible?    ... View more