Luke Notley Migrating from AWS to Azure Seamlessly CLD32 1

About Me DiverseIT since July Prior to that I ran my own cloud/hosting company in Perth -Working with Cloud services circa Completed various datacenter and cloud migrations

Agenda -Migration “Must Do” Prerequisites -Setting up a VPN between AWS and Azure -Useful Migration Tools and Methods -Those hidden Gotcha’s

Prerequisites * Assess current usage AWS Bill * Assess currently accessed services VPC Flow Logs, CloudWatch Metrics Application logs, Event logs, Webserver logs, ELB What is accessed externally over the internet or via a VPN? * Document Current Configuration How do you know what needs to be created within Azure? Azure Virtual Machines Readiness Assessment tool / Microsoft Assessment and Planning (MAP) Toolkit * Document Migration Plan What are all of the application dependencies?

VPN Between Azure and AWS * Establish Azure VPN Gateway This will be the primary gateway and AWS will “dial into” the Azure Gateway * Ensure you have at least 1 VM Azure Without a VM, the Azure Gateway will not allow you to “Connect” * Provision a Windows 2012 R2 VPN Server in AWS Ensure it has network connectivity to all VPC networks in AWS which are being migrated * Connect!

Establish Azure VPN Gateway Establish Your Azure Networks Define your AWS “Local” networks Configure Azure VPN Gateway (takes up to 30 minutes) Make sure gateway type is “Dynamic!”

Windows VPN Server in AWS Ensure it has network connectivity to all VPC networks Use the script generated from Azure to configure Dial on Demand will save you $$$ Ensure passphrase is correct and changed regularly

Question? Why can we not establish a VPN natively between AWS VPN Server within a VPN and Azure Gateway?

Useful Migration Tools and Methods

Treat the migration like no other Testing criteria is the same as DC to DC Still watch out for data consistency Testing Testing Testing!

Use Native Application Methods Exchange Replication SQL Mirroring/Replication DFS Robocopy! Clustering

Augment Native Methods with Tools Azure Site Recovery Services Syncovery (File Based) Double Take Move (In Guest Agent) Zerto Any tool which allows you to install “in guest” agents to perform data replication

Those hidden Gotcha’s! AWS Network and Firewall ACL’s! At least 1 Azure VM required in your Azure Network If multiple networks, ensure routing is configured Test Test Test Application Dependencies DNS (external and internal)

Useful Links Setting up VPN Between AWS and Azure azure-with-windows-server-2012-routing-and-remote-access/ server-2012-r2-rras.aspx

Useful Links AWS – Configuring VPC Flow Logs Powershell Toolkit for AWS

Useful Links Migration Tool - Syncovery Azure Site Recovery

Continue your Ignite learning path Visit Microsoft Virtual Academy for free online training visit Visit Channel 9 to access a wide range of Microsoft training and event recordings Head to the TechNet Eval Centre to download trials of the latest Microsoft products