在 Azure IaaS 上搭建高性能工作负载：别只挑 VM 规格，要看整体系统

# 变量定义
RG_NAME="perf-db-rg"
LOCATION="eastus"
PPG_NAME="db-ppg"

# 创建资源组
az group create --name $RG_NAME --location $LOCATION

# 创建 Proximity Placement Group——收拢 VM 物理距离，降低网络延迟
az ppg create \
  --name $PPG_NAME \
  --resource-group $RG_NAME \
  --location $LOCATION \
  --intent-vm-sizes Standard_E32bs_v5

// file: perf-db-vm.bicep
param vmName string = 'perf-db-vm01'
param location string = resourceGroup().location
param ppgName string = 'db-ppg'
param adminUsername string = 'azureuser'
param adminPassword string

// 加速网络 + PPG 对齐的 VM
resource vm 'Microsoft.Compute/virtualMachines@2024-03-01' = {
  name: vmName
  location: location
  properties: {
    proximityPlacementGroup: {
      id: resourceId('Microsoft.Compute/proximityPlacementGroups', ppgName)
    }
    hardwareProfile: {
      // Ebs_v5 系列：存储缓存带宽放大，适合数据库
      vmSize: 'Standard_E32bs_v5'
    }
    osProfile: {
      computerName: vmName
      adminUsername: adminUsername
      adminPassword: adminPassword
    }
    networkProfile: {
      networkInterfaces: [
        {
          id: nic.id
        }
      ]
    }
    storageProfile: {
      imageReference: {
        publisher: 'Canonical'
        offer: 'ubuntu-24_04-lts'
        sku: 'server'
        version: 'latest'
      }
      osDisk: {
        caching: 'ReadWrite'
        createOption: 'FromImage'
        managedDisk: {
          storageAccountType: 'PremiumV2_LRS'
        }
      }
      dataDisks: [
        // 数据盘：ReadWrite 缓存，随机读命中本地缓存
        {
          lun: 0
          caching: 'ReadWrite'
          createOption: 'Empty'
          diskSizeGB: 1024
          managedDisk: {
            storageAccountType: 'PremiumV2_LRS'
          }
        }
        // 日志盘：None 缓存，避免写放大
        {
          lun: 1
          caching: 'None'
          createOption: 'Empty'
          diskSizeGB: 256
          managedDisk: {
            storageAccountType: 'PremiumV2_LRS'
          }
        }
      ]
    }
  }
}

// 加速网络开启的 NIC
resource nic 'Microsoft.Network/networkInterfaces@2024-01-01' = {
  name: '${vmName}-nic'
  location: location
  properties: {
    enableAcceleratedNetworking: true  // 关键：跳过虚拟交换机，SR-IOV 直通
    ipConfigurations: [
      {
        name: 'ipconfig1'
        properties: {
          subnet: {
            id: subnet.id
          }
          privateIPAllocationMethod: 'Dynamic'
        }
      }
    ]
    networkSecurityGroup: {
      id: nsg.id
    }
  }
}

// 子网
resource vnet 'Microsoft.Network/virtualNetworks@2024-01-01' = {
  name: '${vmName}-vnet'
  location: location
  properties: {
    addressSpace: {
      addressPrefixes: ['10.0.0.0/16']
    }
    subnets: [
      {
        name: 'default'
        properties: {
          addressPrefix: '10.0.0.0/24'
        }
      }
    ]
  }
}

resource subnet 'Microsoft.Network/virtualNetworks/subnets@2024-01-01' = {
  name: 'default'
  parent: vnet
  properties: {
    addressPrefix: '10.0.0.0/24'
  }
}

// NSG——仅放行 SSH 和数据库端口（示例用 5432）
resource nsg 'Microsoft.Network/networkSecurityGroups@2024-01-01' = {
  name: '${vmName}-nsg'
  location: location
  properties: {
    securityRules: [
      {
        name: 'ssh'
        properties: {
          priority: 100
          direction: 'Inbound'
          access: 'Allow'
          protocol: 'Tcp'
          sourcePortRange: '*'
          destinationPortRange: '22'
          sourceAddressPrefix: '*'
          destinationAddressPrefix: '*'
        }
      }
      {
        name: 'db-port'
        properties: {
          priority: 110
          direction: 'Inbound'
          access: 'Allow'
          protocol: 'Tcp'
          sourcePortRange: '*'
          destinationPortRange: '5432'
          sourceAddressPrefix: '10.0.0.0/16'
          destinationAddressPrefix: '*'
        }
      }
    ]
  }
}

az deployment group create \
  --resource-group $RG_NAME \
  --template-file perf-db-vm.bicep \
  --parameters adminPassword='<你的强密码>'

# 查看加速网络是否启用
az vm show \
  --resource-group $RG_NAME \
  --name perf-db-vm01 \
  --query "networkProfile.networkInterfaces[0].id" -o tsv | \
  xargs -I{} az network nic show --ids {} \
  --query "enableAcceleratedNetworking" -o tsv
# 期望输出: true

# 查看数据盘缓存策略
az vm show \
  --resource-group $RG_NAME \
  --name perf-db-vm01 \
  --query "storageProfile.dataDisks[].{Lun:lun, Caching:caching, SKU:managedDisk.storageAccountType}" -o table
# 期望输出:
# Lun  Caching      SKU
# 0    ReadWrite    PremiumV2_LRS
# 1    None         PremiumV2_LRS

# 查看 PPG 关联
az vm show \
  --resource-group $RG_NAME \
  --name perf-db-vm01 \
  --query "properties.proximityPlacementGroup.id" -o tsv
# 期望输出: 包含 db-ppg 的资源 ID