You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/load-balancer/upgrade-basic-standard-vmss.md
+27-23Lines changed: 27 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,30 +16,30 @@ This article introduces a PowerShell module that creates a Standard Load Balance
16
16
17
17
## Upgrade Overview
18
18
19
-
An Azure PowerShell module is available to upgrade from Basic load balancer to a Standard load balancer along with moving the associated Virtual Machine Scale set (VMSS). The PowerShell module performs the following functions:
19
+
An Azure PowerShell module is available to upgrade from Basic load balancer to a Standard load balancer along with moving the associated virtual machine scale set. The PowerShell module performs the following functions:
20
20
21
21
- Verifies that the provided Basic load balancer scenario is supported for upgrade.
22
-
- Backs up the Basic load balancer and Virtual Machine Scale set (VMSS) configuration, enabling retry on failure or if errors are encountered.
22
+
- Backs up the Basic load balancer and virtual machine scale set configuration, enabling retry on failure or if errors are encountered.
23
23
- For public load balancers, updates the front end public IP address(es) to Standard SKU and static assignment as required.
24
24
- Upgrade the Basic load balancer configuration to a new Standard load balancer, ensuring configuration and feature parity.
25
-
- Upgrade VMSS backend pool members from the Basic load balancer to the standard load balancer.
26
-
- Creates and associates a NSG with the VMSS to ensure load balanced traffic reaches backend pool members, following Standard load balancer's move to a default-deny network policy.
25
+
- Upgrade virtual machine scale set backend pool members from the Basic load balancer to the standard load balancer.
26
+
- Creates and associates a network security group with the virtual machine scale set to ensure load balanced traffic reaches backend pool members, following Standard load balancer's move to a default-deny network policy.
27
27
- Logs the upgrade operation for easy audit and failure recovery.
28
28
29
29
### Unsupported Scenarios
30
30
31
-
- Basic load balancers with a VMSS backend pool member which is also a member of a backend pool on a different load balancer
32
-
- Basic load balancers with backend pool members which are not a VMSS
31
+
- Basic load balancers with a virtual machine scale set backend pool member that is also a member of a backend pool on a different load balancer
32
+
- Basic load balancers with backend pool members that aren't a virtual machine scale set
33
33
- Basic load balancers with only empty backend pools
34
34
- Basic load balancers with IPV6 frontend IP configurations
35
-
- Basic load balancers with a VMSS backend pool member configured with 'Flexible' orchestration mode
36
-
- Basic load balancers with a VMSS backend pool member where one or more VMSS instances have ProtectFromScaleSetActions Instance Protection policies enabled
35
+
- Basic load balancers with a virtual machine scale set backend pool member configured with 'Flexible' orchestration mode
36
+
- Basic load balancers with a virtual machine scale set backend pool member where one or more virtual machine scale set instances have ProtectFromScaleSetActions Instance Protection policies enabled
37
37
- Migrating a Basic load balancer to an existing Standard load balancer
38
38
39
39
### Prerequisites
40
40
41
-
- Install the latest version of [PowerShell Desktop or Core ](/powershell/scripting/install/installing-powershell)
42
-
- Determine whether you have the latest Az module installed (8.2.0)
41
+
- Install the latest version of [PowerShell](/powershell/scripting/install/installing-powershell)
42
+
- Determine whether you have the latest Az PowerShell module installed (8.2.0)
43
43
- Install the latest Az PowerShell module](/powershell/azure/install-az-ps)
44
44
45
45
## Install the 'AzureBasicLoadBalancerUpgrade' module
- *ResourceGroupName [string] Required* - This parameter is the name of the resource group containing the Basic load balancer
66
66
- *RecoveryBackupPath [string] Optional* - This parameter allows you to specify an alternative path in which to store the Basic load balancer ARM template backup file (defaults to the current working directory)
67
67
- *FailedMigrationRetryFilePathLB [string] Optional* - This parameter allows you to specify a path to a Basic load balancer backup state file when retrying a failed upgrade (defaults to current working directory)
68
-
- *FailedMigrationRetryFilePathVMSS [string] Optional* - This parameter allows you to specify a path to a Virtual Machine Scale set (VMSS) backup state file when retrying a failed upgrade (defaults to current working directory)
68
+
- *FailedMigrationRetryFilePathVMSS [string] Optional* - This parameter allows you to specify a path to a virtual machine scale set (virtual machine scale set) backup state file when retrying a failed upgrade (defaults to current working directory)
### Example: retry a failed upgrade (due to error or script termination) by providing the Basic load balancer and VMSS backup state file
96
+
### Example: retry a failed upgrade (due to error or script termination) by providing the Basic load balancer and virtual machine scale set backup state file
### Will the module migrate my frontend IP address to the new Standard load balancer?
105
105
106
-
Yes, for both public and internal load balancers, the module ensures that front end IP addresses are maintained. For public IPs, the IP is converted to a static IP prior to migration (if necessary). For internal front ends, the module will attempt to reassign the same IP address freed up when the Basic load balancer was deleted; if the private IP is not available the script will fail. In this scenario, remove the virtual network connected device which has claimed the intended front end IP and rerun the module with the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters specified.
106
+
Yes, for both public and internal load balancers, the module ensures that front end IP addresses are maintained. For public IPs, the IP is converted to a static IP prior to migration (if necessary). For internal front ends, the module will attempt to reassign the same IP address freed up when the Basic load balancer was deleted; if the private IP isn't available the script will fail. In this scenario, remove the virtual network connected device that has claimed the intended front end IP and rerun the module with the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters specified.
107
107
108
108
### How long does the Upgrade take?
109
109
110
-
It usually takes a few minutes for the script to finish and it could take longer depending on the complexity of your load balancer configuration, number of backend pool members, and instance count of associated Virtual Machine Scale Sets. Keep the downtime in mind and plan for failover if necessary.
110
+
The upgrade normally takes a few minutes for the script to finish. The following factors may lead to longer upgrade times:
111
+
- Complexity of your load balancer configuration
112
+
- Number of backend pool members
113
+
- Instance count of associated Virtual Machine Scale Sets.
114
+
Keep the downtime in mind and plan for failover if necessary.
111
115
112
116
### Does the script migrate my backend pool members from my basic load balancer to the newly created standard load balancer?
113
117
@@ -130,13 +134,13 @@ The script migrates the following from the Basic load balancer to the Standard l
130
134
- Inbound NAT Rules:
131
135
- All NAT rules will be migrated to the new Standard load balancer
132
136
- Outbound Rules:
133
-
- Basic load balancers do not support configured outbound rules. The script will create an outbound rule in the Standard load balancer to preserve the outbound behavior of the Basic load balancer. For more information about Outbound connectivity, see [Outbound-only load balancer configuration](/azure/load-balancer/egress-only).
134
-
- Network Security Group
135
-
- Basic load balancer doesn't required a Network Security Group to allow outbound connectivity. In case there is no Network Security Group associated with the VMSS, a new NSG will be created to preserve the same functionality. This new NSG will be associated to the VMSS backend pool member network interfaces and allow the same load balancing rules ports and protocols and preserve the outbound connectivity.
137
+
- Basic load balancers don't support configured outbound rules. The script will create an outbound rule in the Standard load balancer to preserve the outbound behavior of the Basic load balancer. For more information about Outbound connectivity, see [Outbound-only load balancer configuration](/azure/load-balancer/egress-only).
138
+
- Network security group
139
+
- Basic load balancer doesn't require a network security group to allow outbound connectivity. In case there's no network security group associated with the virtual machine scale set, a new network security group will be created to preserve the same functionality. This new network security group will be associated to the virtual machine scale set backend pool member network interfaces. It will allow the same load balancing rules ports and protocols and preserve the outbound connectivity.
136
140
- Backend pools:
137
141
- All backend pools will be migrated to the new Standard load balancer
138
-
- All VMSS network interfaces and IP configurations will be migrated to the new Standard load balancer
139
-
-In case of VMSS using Rolling Upgrade policy, the script will update the VMSS upgrade policy to "Manual" during the migration process and revert it back to "Rolling" after the migration is completed.
142
+
- All virtual machine scale set network interfaces and IP configurations will be migrated to the new Standard load balancer
143
+
-If a virtual machine scale set is using Rolling Upgrade policy, the script will update the virtual machine scale set upgrade policy to "Manual" during the migration process and revert it back to "Rolling" after the migration is completed.
140
144
141
145
**Private Load Balancer:**
142
146
@@ -151,15 +155,15 @@ The script migrates the following from the Basic load balancer to the Standard l
151
155
- All NAT rules will be migrated to the new Standard load balancer
152
156
- Backend pools:
153
157
- All backend pools will be migrated to the new Standard load balancer
154
-
- All VMSS network interfaces and IP configurations will be migrated to the new Standard load balancer
155
-
-In case of VMSS using Rolling Upgrade policy, the script will update the VMSS upgrade policy to "Manual" during the migration process and revert it back to "Rolling" after the migration is completed.
158
+
- All virtual machine scale set network interfaces and IP configurations will be migrated to the new Standard load balancer
159
+
-If there's a virtual machine scale set using Rolling Upgrade policy, the script will update the virtual machine scale set upgrade policy to "Manual" during the migration process and revert it back to "Rolling" after the migration is completed.
156
160
157
161
### What happens if my upgrade fails mid-migration?
158
162
159
-
The module is designed to accommodate failures, either due to unhandled errors or unexpected script termination. The failure design is a 'fail forward' approach, where instead of attempting to move back to the Basic load balancer, you should correct the issue causing the failure (see the error output or log file), and retry the migration again, specifying the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters. For public load balancers, because the Public IP Address SKU has been updated to Standard, moving the same IP back to a Basic load balancer will not be possible. The basic failure recovery procedure is:
163
+
The module is designed to accommodate failures, either due to unhandled errors or unexpected script termination. The failure design is a 'fail forward' approach, where instead of attempting to move back to the Basic load balancer, you should correct the issue causing the failure (see the error output or log file), and retry the migration again, specifying the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters. For public load balancers, because the Public IP Address SKU has been updated to Standard, moving the same IP back to a Basic load balancer won't be possible. The basic failure recovery procedure is:
160
164
161
165
1. Address the cause of the migration failure. Check the log file `Start-AzBasicLoadBalancerUpgrade.log` for details
162
-
1.[Remove the new Standard load balancer](/azure/load-balancer/update-load-balancer-with-vm-scale-set) (if created). Depending on which stage of the migration failed, you may have to remove the Standard load balancer reference from the VMSS network interfaces (IP configurations) and health probes in order to remove the Standard load balancer and try again.
166
+
1.[Remove the new Standard load balancer](/azure/load-balancer/update-load-balancer-with-vm-scale-set) (if created). Depending on which stage of the migration failed, you may have to remove the Standard load balancer reference from the virtual machine scale set network interfaces (IP configurations) and health probes in order to remove the Standard load balancer and try again.
163
167
1. Locate the basic load balancer state backup file. This will either be in the directory where the script was executed, or at the path specified with the `-RecoveryBackupPath` parameter during the failed execution. The file will be named: `State_<basicLBName>_<basicLBRGName>_<timestamp>.json`
164
168
1. Rerun the migration script, specifying the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters instead of -BasicLoadBalancerName or passing the Basic load balancer over the pipeline
0 commit comments