Apresentação de Windows workloads no AWS Migration Day Brasil 2020

1. Caio Ribeiro César
Specialist Solutions Architecture: Microsoft Platform
Windows Workloads - Migrations

2. Presenter
Caio Ribeiro César – Specialist Solutions
Architecture: Microsoft Platform
13y experience with MS Workloads
Expertise: AWS Cloud,Windows Workloads,
Identity Online, Exchange, Azure & O365.
AWS Associate + Security
MCT, MCSE, Azure Admin & Sec, CEH, CHFI

3. Agenda
Migration Strategies
Part 1 – Identity
Part 2 – Servers
Part 3 – Databases
Part 4 - Storage

4. Replatforming
(Lift & Reshape)
Redesign Application/
Infrastructure Architecture
Discovery
Use Migration Tools
Transition Production
App Code
Development
Purchase COTS/
SaaS & licensing
Validation
Modify underlying
Infrastructure
Full ALM/SDLC
Config DeployInstall
Retire/Decommission
Determine
Migration
Path
Automate
Manual Install
& Setup
Integration
Determine
new platform
Docker / vMotion
Determine configuration
Assess/
Prioritize
Retain/Move
Migration strategies
Executing a Large-Scale Migration to AWS
https://youtu.be/ABbByVDJjGk

5. Part 1 – Identity
AD
Connector
AWS Managed
Microsoft ADAWS Directory
Service
AWS Single Sign-On
EC2 Domain
Controllers

6. AWS Managed Directory Services
Microsoft Active Directory
• Managed Microsoft Active Directory
(Standard & Enterprise Editions)
• Multi-AZ HA deployment
• 99.95% SLA
• Domain join EC2 Windows Instances
• Native Active Directory functionality
• Supports Multi Factor Auth (Radius)
• Single sign-on to the AWS console
Simple AD
• Active Directory compatible directory
powered by Samba 4
• AWS only (no extensions to on-prem)
• Access AWS services (WorkSpaces,
WorkDocs, WorkMail)
• Single sign-on to the AWS console
• Small (500) or Large (5000) users
• Does not support – RDS SQL, SSO,
Trust, Pshell, Recycle Bin and more
AD Connector
• Proxy service forwarding requests to
on-prem Active Directory (Gateway)
• Connects AWS services
(WorkSpaces, WorkDocs, WorkMail)
to on-prem Active Directory
• Supports Multi Factor Auth (Radius)
• Single sign-on to the AWS console
On-premises

9. DCs On-premises & EC2 com AD Connector
Availability Zone 1
Ec2 Domain controllers
Domain members
Corporate data
center
AD
Domain
controllers
AWS Direct Connect
AD Connector
AD Replication
company.local
company.local Domain members
Availability Zone 2
Ec2 Domain controllers
Domain members
AD Connector
company.local
Domain members
AD Replication AWS SSO
AWS Cloud
VPC

10. AD Connector e DCs On-premises
Availability Zone 1
Availability Zone 2
EC2 Domain Joined
Corporate data center
AD
Domain
controllers
AWS Direct Connect
AD Connector
Ldap, DNS, Kerberos
company.local
EC2 Domain Joined
EC2 Domain Joined
AD Connector
EC2 Domain Joined
VPC
AWS Cloud

11. Part 2 – Servers
Amazon EC2 AWS Server
Migration Service

12. AWS Server Migration Services
• Simplify the cloud migration process.
• Orchestrate multi-server migrations
• Test server migrations incrementally
• Support the most widely used operating systems
• VMware & Hyper-V support
• Minimize downtime
• AWS Server Migration Connector (Connector is a FreeBSD VM)

13. Simplify and accelerate Migration with
CloudEndure
Highly automated
Short cutover windows
with minimal downtime
Minimal skill set
required to operate
Easily plugs into
migration factories
and cloud COEs
Easy, non-disruptive
tests prior to cutover
Reliable
Robust, predictable, non-
disruptive continuous
replication
Highly secure
for regulated
environments
Migrate from
any source
Flexible
Option to
migrate back
Wide range of OS,
application, and
database support

14. Typical Microsoft Web application architecture
Proxy
SQL Primary SQL Secondary
Web Web
Active Directory
Application
Management
Primary Datacenter DR Datacenter
SQL
Always
On
Proxy
DMZ DMZ
Web Web
Application
Management
SQL Secondary
Synchronous
Commit Asynchronous
Commit
Certificate Server

15. 15
Octank MS Workload
Website
Users
Amazon Route 53
octankenterprises.com
Hosted Zone
Amazon
VPC
SA
Application
Load
Balancer &
WAF
EC2 Auto
Scaling
Availability Zone A - SouthAmerica
Availability Zone B
EC2
(IIS/Web)
DynamoDB -
Session State
Availability Zone A
Availability Zone B - London
AWS
Systems
Manager
Amazon
CloudWatch
Amazon SNS
(Email)
Amazon S3
Amazon
CloudFront
Amazon
ElasticSearch
AWS
Config
Kibana
EC2
(ASP.NET)
EC2
(IIS/Web)
EC2
(ASP.NET)
NAT gateway (private
subnets)
Internet
SSM State
Manager
SSM Session
Manager
Secrets
Manager & KMS
Lambda Function
VPC
Peering
AWS
Certificate
Manager
Aurora Writer Aurora Reader
Aurora RR Aurora RR
3-tier Migration
(Detailed)

16. Part 3 – Database
Amazon RDS
SQL Server
instance
AWS Database Migration
Service

17. Migrating SQL Server databases to AWS
Amazon
EC2
SQL Server
Migrate
On- Premise

18. App Web
App Web
VPC endpoint
SQL Server
backups
to Amazon S3
.bak uploads to S3
HTTPS traffic
.bak downloads
using VPC endpoint
Restore .bak
Availability zone
Subnet
Availability zone
Subnet
On-Premise
MS SQL
Replica
MS SQL
Primary
SQL Server
VPC
AlwaysOn
Endpoints

19. Native SQL backup to Amazon S3 via SMB
Corporate data center
SQL Server
(native SQL agent)
Domain
controller
Share
(SMB)
Local
cache
Backup
bucket SQL Server
Corporate data center
On-Premise AWS Cloud

20. Cloud
Migration
SQL Server
Amazon S3
MS SQL
instance
AWSImport/ExportSnowball

21. SubnetSubnet
Log Shipping
On-Premises
SQL Server
Primary
SQL Server
Warm Standby
VPC
SQL Server
Secondary Replica
WSFC
AlwaysOn

22. SubnetSubnet
Database Mirroring
On-Premises
SQL Server
Principal
SQL Server
Warm Standby
VPC
SQL Server
Secondary Replica
WSFC
AlwaysOn

23. AlwaysOn Availability Groups
On-Premises
SQL Server
Primary Replica
SQL Server
Secondary Replica
SQL Server
Secondary Replica
VPC
WSFC
Availability Group
Subnet

24. AWS Database Migration Service (DMS) easily and
securely migrate and/or replicate your databases and
warehouses to AWS
AWS Schema Conversion Tool (SCT) convert your commercial
database and data warehouse schemas to open-source
engines or AWS-native services, such as Amazon Aurora and
Redshift
AWS Database Migration Service

25. Part 4 – Storage
AWS DataSync DataSync AgentAmazon FSx

26. What is Amazon FSx for Windows File Server?
Deeply integrated
with AWS
Fully managed native
Windows file systems

27. Deploy agent on
VMware or EC2 for
efficient access to
local NFS or SMB
server
Secure highly parallel
transfers using
optimized network
protocol
Optimized reads and writes
to Amazon S3, Amazon EFS
or Amazon FSx for Windows
File Server
Fully managed service
scales to send or
receive data from agent
On-Premises AWS
AWS DataSyncShared
file system
AWS DataSync
agent
NFS or SMB
TLS
AWS DataSync: How it works
AWS Storage Resources
Amazon Elastic
File System
Amazon S3
All storage classes
Amazon FSx for
Windows File Server

28. • Fully automated and integrated with AWS services
• Performs integrity checks on data transferred
• Preserve file-level metadata and attributes when
transferring between Windows file shares
• Accelerates data transfer up to 10x faster than
command line tools (robocopy )
• Data is encrypted in transit with TLS
Key AWS DataSync Features

29. Obrigado!