Skip to content

Commit fbc628c

Browse files
authored
Merge pull request #1 from mbender-ms/welasco-mbender-review
Acrolinx fixes
2 parents 896a596 + 35667d7 commit fbc628c

File tree

1 file changed

+27
-23
lines changed

1 file changed

+27
-23
lines changed

articles/load-balancer/upgrade-basic-standard-vmss.md

Lines changed: 27 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -16,30 +16,30 @@ This article introduces a PowerShell module that creates a Standard Load Balance
1616

1717
## Upgrade Overview
1818

19-
An Azure PowerShell module is available to upgrade from Basic load balancer to a Standard load balancer along with moving the associated Virtual Machine Scale set (VMSS). The PowerShell module performs the following functions:
19+
An Azure PowerShell module is available to upgrade from Basic load balancer to a Standard load balancer along with moving the associated virtual machine scale set. The PowerShell module performs the following functions:
2020

2121
- Verifies that the provided Basic load balancer scenario is supported for upgrade.
22-
- Backs up the Basic load balancer and Virtual Machine Scale set (VMSS) configuration, enabling retry on failure or if errors are encountered.
22+
- Backs up the Basic load balancer and virtual machine scale set configuration, enabling retry on failure or if errors are encountered.
2323
- For public load balancers, updates the front end public IP address(es) to Standard SKU and static assignment as required.
2424
- Upgrade the Basic load balancer configuration to a new Standard load balancer, ensuring configuration and feature parity.
25-
- Upgrade VMSS backend pool members from the Basic load balancer to the standard load balancer.
26-
- Creates and associates a NSG with the VMSS to ensure load balanced traffic reaches backend pool members, following Standard load balancer's move to a default-deny network policy.
25+
- Upgrade virtual machine scale set backend pool members from the Basic load balancer to the standard load balancer.
26+
- Creates and associates a network security group with the virtual machine scale set to ensure load balanced traffic reaches backend pool members, following Standard load balancer's move to a default-deny network policy.
2727
- Logs the upgrade operation for easy audit and failure recovery.
2828

2929
### Unsupported Scenarios
3030

31-
- Basic load balancers with a VMSS backend pool member which is also a member of a backend pool on a different load balancer
32-
- Basic load balancers with backend pool members which are not a VMSS
31+
- Basic load balancers with a virtual machine scale set backend pool member that is also a member of a backend pool on a different load balancer
32+
- Basic load balancers with backend pool members that aren't a virtual machine scale set
3333
- Basic load balancers with only empty backend pools
3434
- Basic load balancers with IPV6 frontend IP configurations
35-
- Basic load balancers with a VMSS backend pool member configured with 'Flexible' orchestration mode
36-
- Basic load balancers with a VMSS backend pool member where one or more VMSS instances have ProtectFromScaleSetActions Instance Protection policies enabled
35+
- Basic load balancers with a virtual machine scale set backend pool member configured with 'Flexible' orchestration mode
36+
- Basic load balancers with a virtual machine scale set backend pool member where one or more virtual machine scale set instances have ProtectFromScaleSetActions Instance Protection policies enabled
3737
- Migrating a Basic load balancer to an existing Standard load balancer
3838

3939
### Prerequisites
4040

41-
- Install the latest version of [PowerShell Desktop or Core ](/powershell/scripting/install/installing-powershell)
42-
- Determine whether you have the latest Az module installed (8.2.0)
41+
- Install the latest version of [PowerShell](/powershell/scripting/install/installing-powershell)
42+
- Determine whether you have the latest Az PowerShell module installed (8.2.0)
4343
- Install the latest Az PowerShell module](/powershell/azure/install-az-ps)
4444

4545
## Install the 'AzureBasicLoadBalancerUpgrade' module
@@ -65,7 +65,7 @@ PS C:\> Install-Module -Name AzureBasicLoadBalancerUpgrade -Scope CurrentUser -R
6565
- *ResourceGroupName [string] Required* - This parameter is the name of the resource group containing the Basic load balancer
6666
- *RecoveryBackupPath [string] Optional* - This parameter allows you to specify an alternative path in which to store the Basic load balancer ARM template backup file (defaults to the current working directory)
6767
- *FailedMigrationRetryFilePathLB [string] Optional* - This parameter allows you to specify a path to a Basic load balancer backup state file when retrying a failed upgrade (defaults to current working directory)
68-
- *FailedMigrationRetryFilePathVMSS [string] Optional* - This parameter allows you to specify a path to a Virtual Machine Scale set (VMSS) backup state file when retrying a failed upgrade (defaults to current working directory)
68+
- *FailedMigrationRetryFilePathVMSS [string] Optional* - This parameter allows you to specify a path to a virtual machine scale set (virtual machine scale set) backup state file when retrying a failed upgrade (defaults to current working directory)
6969
7070
4. Run the Upgrade command.
7171
@@ -93,7 +93,7 @@ PS C:\> Start-AzBasicLoadBalancerUpgrade -ResourceGroupName <load balancer resou
9393
PS C:\> Start-AzBasicLoadBalancerUpgrade -ResourceGroupName <load balancer resource group name> -BasicLoadBalancerName <existing basic load balancer name> -StandardLoadBalancerName <new standard load balancer name> -RecoveryBackupPath C:\BasicLBRecovery
9494
```
9595

96-
### Example: retry a failed upgrade (due to error or script termination) by providing the Basic load balancer and VMSS backup state file
96+
### Example: retry a failed upgrade (due to error or script termination) by providing the Basic load balancer and virtual machine scale set backup state file
9797

9898
```powerhsell
9999
PS C:\> Start-AzBasicLoadBalancerUpgrade -FailedMigrationRetryFilePathLB C:\RecoveryBackups\State_mybasiclb_rg-basiclbrg_20220912T1740032148.json -FailedMigrationRetryFilePathVMSS C:\RecoveryBackups\VMSS_myVMSS_rg-basiclbrg_20220912T1740032148.json
@@ -103,11 +103,15 @@ PS C:\> Start-AzBasicLoadBalancerUpgrade -FailedMigrationRetryFilePathLB C:\Reco
103103

104104
### Will the module migrate my frontend IP address to the new Standard load balancer?
105105

106-
Yes, for both public and internal load balancers, the module ensures that front end IP addresses are maintained. For public IPs, the IP is converted to a static IP prior to migration (if necessary). For internal front ends, the module will attempt to reassign the same IP address freed up when the Basic load balancer was deleted; if the private IP is not available the script will fail. In this scenario, remove the virtual network connected device which has claimed the intended front end IP and rerun the module with the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters specified.
106+
Yes, for both public and internal load balancers, the module ensures that front end IP addresses are maintained. For public IPs, the IP is converted to a static IP prior to migration (if necessary). For internal front ends, the module will attempt to reassign the same IP address freed up when the Basic load balancer was deleted; if the private IP isn't available the script will fail. In this scenario, remove the virtual network connected device that has claimed the intended front end IP and rerun the module with the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters specified.
107107

108108
### How long does the Upgrade take?
109109

110-
It usually takes a few minutes for the script to finish and it could take longer depending on the complexity of your load balancer configuration, number of backend pool members, and instance count of associated Virtual Machine Scale Sets. Keep the downtime in mind and plan for failover if necessary.
110+
The upgrade normally takes a few minutes for the script to finish. The following factors may lead to longer upgrade times:
111+
- Complexity of your load balancer configuration
112+
- Number of backend pool members
113+
- Instance count of associated Virtual Machine Scale Sets.
114+
Keep the downtime in mind and plan for failover if necessary.
111115

112116
### Does the script migrate my backend pool members from my basic load balancer to the newly created standard load balancer?
113117

@@ -130,13 +134,13 @@ The script migrates the following from the Basic load balancer to the Standard l
130134
- Inbound NAT Rules:
131135
- All NAT rules will be migrated to the new Standard load balancer
132136
- Outbound Rules:
133-
- Basic load balancers do not support configured outbound rules. The script will create an outbound rule in the Standard load balancer to preserve the outbound behavior of the Basic load balancer. For more information about Outbound connectivity, see [Outbound-only load balancer configuration](/azure/load-balancer/egress-only).
134-
- Network Security Group
135-
- Basic load balancer doesn't required a Network Security Group to allow outbound connectivity. In case there is no Network Security Group associated with the VMSS, a new NSG will be created to preserve the same functionality. This new NSG will be associated to the VMSS backend pool member network interfaces and allow the same load balancing rules ports and protocols and preserve the outbound connectivity.
137+
- Basic load balancers don't support configured outbound rules. The script will create an outbound rule in the Standard load balancer to preserve the outbound behavior of the Basic load balancer. For more information about Outbound connectivity, see [Outbound-only load balancer configuration](/azure/load-balancer/egress-only).
138+
- Network security group
139+
- Basic load balancer doesn't require a network security group to allow outbound connectivity. In case there's no network security group associated with the virtual machine scale set, a new network security group will be created to preserve the same functionality. This new network security group will be associated to the virtual machine scale set backend pool member network interfaces. It will allow the same load balancing rules ports and protocols and preserve the outbound connectivity.
136140
- Backend pools:
137141
- All backend pools will be migrated to the new Standard load balancer
138-
- All VMSS network interfaces and IP configurations will be migrated to the new Standard load balancer
139-
- In case of VMSS using Rolling Upgrade policy, the script will update the VMSS upgrade policy to "Manual" during the migration process and revert it back to "Rolling" after the migration is completed.
142+
- All virtual machine scale set network interfaces and IP configurations will be migrated to the new Standard load balancer
143+
- If a virtual machine scale set is using Rolling Upgrade policy, the script will update the virtual machine scale set upgrade policy to "Manual" during the migration process and revert it back to "Rolling" after the migration is completed.
140144

141145
**Private Load Balancer:**
142146

@@ -151,15 +155,15 @@ The script migrates the following from the Basic load balancer to the Standard l
151155
- All NAT rules will be migrated to the new Standard load balancer
152156
- Backend pools:
153157
- All backend pools will be migrated to the new Standard load balancer
154-
- All VMSS network interfaces and IP configurations will be migrated to the new Standard load balancer
155-
- In case of VMSS using Rolling Upgrade policy, the script will update the VMSS upgrade policy to "Manual" during the migration process and revert it back to "Rolling" after the migration is completed.
158+
- All virtual machine scale set network interfaces and IP configurations will be migrated to the new Standard load balancer
159+
- If there's a virtual machine scale set using Rolling Upgrade policy, the script will update the virtual machine scale set upgrade policy to "Manual" during the migration process and revert it back to "Rolling" after the migration is completed.
156160

157161
### What happens if my upgrade fails mid-migration?
158162

159-
The module is designed to accommodate failures, either due to unhandled errors or unexpected script termination. The failure design is a 'fail forward' approach, where instead of attempting to move back to the Basic load balancer, you should correct the issue causing the failure (see the error output or log file), and retry the migration again, specifying the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters. For public load balancers, because the Public IP Address SKU has been updated to Standard, moving the same IP back to a Basic load balancer will not be possible. The basic failure recovery procedure is:
163+
The module is designed to accommodate failures, either due to unhandled errors or unexpected script termination. The failure design is a 'fail forward' approach, where instead of attempting to move back to the Basic load balancer, you should correct the issue causing the failure (see the error output or log file), and retry the migration again, specifying the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters. For public load balancers, because the Public IP Address SKU has been updated to Standard, moving the same IP back to a Basic load balancer won't be possible. The basic failure recovery procedure is:
160164

161165
1. Address the cause of the migration failure. Check the log file `Start-AzBasicLoadBalancerUpgrade.log` for details
162-
1. [Remove the new Standard load balancer](/azure/load-balancer/update-load-balancer-with-vm-scale-set) (if created). Depending on which stage of the migration failed, you may have to remove the Standard load balancer reference from the VMSS network interfaces (IP configurations) and health probes in order to remove the Standard load balancer and try again.
166+
1. [Remove the new Standard load balancer](/azure/load-balancer/update-load-balancer-with-vm-scale-set) (if created). Depending on which stage of the migration failed, you may have to remove the Standard load balancer reference from the virtual machine scale set network interfaces (IP configurations) and health probes in order to remove the Standard load balancer and try again.
163167
1. Locate the basic load balancer state backup file. This will either be in the directory where the script was executed, or at the path specified with the `-RecoveryBackupPath` parameter during the failed execution. The file will be named: `State_<basicLBName>_<basicLBRGName>_<timestamp>.json`
164168
1. Rerun the migration script, specifying the `-FailedMigrationRetryFilePathLB <BasicLoadBalancerbackupFilePath> -FailedMigrationRetryFilePathVMSS <VMSSBackupFile>` parameters instead of -BasicLoadBalancerName or passing the Basic load balancer over the pipeline
165169

0 commit comments

Comments
 (0)