Skip to content

Latest commit

 

History

History
358 lines (237 loc) · 16.6 KB

File metadata and controls

358 lines (237 loc) · 16.6 KB

image

MicroHack - Migrate and Secure to be AI Ready

MicroHack introduction

This MicroHack scenario walks through the process how to optimize and modernize you datacenter. The assessment, the tooling and processes are global best practices and with a focus on the real world scenarios, cost optimization and the best customer recommended design principles. Specifically, this builds up to include working with an existing infrastructure.

This lab is not a full explanation of building up a migration factory or a program to modernize your processes and dependencies. Please consider the following articles required pre-reading to build foundational knowledge.

Optional (read this after completing this lab to take your learning even deeper!)

MicroHack context

This MicroHack scenario walks through the use of Azure Migrate to support the process and the different phases of datacenter modernization:

  • Discover
  • Decide
  • Assess
  • Migrate
  • Modernize

As part of the MicroHack, we will simulate the discovery and migration of physical servers to Azure. We will create the source systems as Azure Virtual Machines within a dedicated source Resource Group in Azure to simulate the on-prem datacenter. We will use Azure Migrate to discover, assess and migrate the systems into a destination Resource Group that simulates the target Azure environment.

The concept behind physical server discovery and migration is described in detail under the following links:

Objectives

After completing this MicroHack you will:

  • Know how to build an assessment & business case for you datacenter transformation
  • Understand the default and best practices how to quickly migrate workloads and safe with right sizing
  • Understand how to use the tools and best practices to optimize and safe time
  • Know how to not only use the tools to Lift & Shift, you will also understand how to modernize to cloud native services

MicroHack challenges

General prerequisites

This MicroHack has a few but important prerequisites

In order to use the MicroHack time most effectively, the following prerequisites should be completed prior to starting the session.

  • Entra ID Tenant
  • At least one Azure Subscription
  • Entra ID user with Contributor or Owner permissions on the Azure Subscription

With these pre-requisites in place, we can focus on building the differentiated knowledge in Azure Migrate that is required when working with the product.

Challenge 1 - Prerequisites and landing zone preparation

Goal

  • Deploy a source resource group with two VMs and their dependencies that act as our physical on-premise servers that will be migrated to Azure.
  • Deploy a destination resource group to which the servers will be migrated.

Actions

Success criteria

  • You have understood the concept and architecture for the MicroHack.
  • The Bicep deployment command exits successfully.
  • The source and destination resource group is visible in the Azure Portal.

Learning resources

Solution - Spoilerwarning

Solution Steps

Challenge 2 - Discover physical servers for the migration

Goal

The goal of this exercise is to...

  • Setup Azure Migrate Project in Azure
  • Installing / Deploying the necessary setup for discovery
  • Create a discovery

Actions

  • Create a Azure Migrate Project

Important

To be able to create a Business Case, make sure to select Europe as the Geography for the Azure Migrate Project

  • Deploy a Azure Migrate Appliance
  • Create a continuous discovery of your source environment

Success criteria

  • You have created a Azure Migrate Project
  • You have successfully deployed the Azure Migrate Appliance
  • You successfully registered the Azure Migrate Appliance with the Azure Migrate Project
  • You have successfully setup a continuous discovery for the physical servers.
  • You have successfully verified the discovered servers in the portal

Learning resources

Solution - Spoilerwarning

Solution Steps

Challenge 3 - Create a Business Case

The Business case capability helps you build a business proposal to understand how Azure can bring the most value to your business.

It highlights:

  • On-premises vs Azure total cost of ownership.
  • Year on year cashflow analysis.
  • Resource utilization based insights to identify servers and workloads that are ideal for cloud.
  • Quick wins for migration and modernization including end of support Windows OS and SQL versions.
  • Long term cost savings by moving from a capital expenditure model to an Operating expenditure model, by paying for only what you use.

Other key features:

  • Helps remove guess work in your cost planning process and adds data insights driven calculations.
  • It can be generated in just a few clicks after you have performed discovery using the Azure Migrate appliance.
  • The feature is automatically enabled for existing Azure Migrate projects.

Goal

The goal of this exercise is to create a business case. The Business case capability helps you build a business proposal to understand how Azure can bring the most value to your business. It highlights:

  • On-premises vs Azure total cost of ownership.
  • Year on year cashflow analysis.
  • Resource utilization based insights to identify servers and workloads that are ideal for cloud.
  • Quick wins for migration and modernization including end of support Windows OS and SQL versions.
  • Long term cost savings by moving from a capital expenditure model to an Operating expenditure model, by paying for only what you use.

Warning

The Business case capability is currently in public preview

Actions

  • Build a business case
  • Review a business case
  • Adjust business case assumptions

Success criteria

  • You successfully build a business case
  • You have successfully reviewed the business case
  • You understand how to adjust the business case assumptions

Learning resources

Solution - Spoilerwarning

Solution Steps

Challenge 4 - Assess VM´s for the migration

In most cases, you don't want to migrate all machines at once, but want to prioritize workload by workload and even understand what the dependencies between workloads are. You then look at each phase or wave of migration and break down the risks and workloads.

Goal

The goal of this exercise is to ...

  • measure the readiness and estimates the effect of migrating on-premises servers to Azure
  • review the assessment output to understand the readiness and sizing recommendations
  • review the dependencies between the discovered servers

Actions

  • Group machines for the assessment
  • Create an Azure VM assessment
  • Review assessment output and recommendations
  • Enable and review dependency analysis

Success criteria

  • You created a machine group
  • You successfully created an Azure VM assessment
  • You reviewed the assessment output and recommendations
  • You enabled and reviewed the dependencies of the discovered server

Learning resources

Solution - Spoilerwarning

Solution Steps

Challenge 5 - Migrate machines to Azure

Goal

The goal of this exercise is to ...

  • understand the different migration options and prerequisites provided by Azure Migrate
  • perform a test migration of the desired workload
  • keep downtime as short as possible
  • perform the final migration towards Azure

Actions

  • Setup the Azure Replication Appliance
  • Deploy the Mobility Service Agent
  • Replicate the machines to Azure
  • Perform a Test Migration
  • Prepare the final Migration
  • Migrate the workload to Azure

Success criteria

  • All the source machines are successfully migrated to and running in Azure
  • The Web Servers are seamlessly accessible using a Traffic Manager profile via dedicated Public Load Balancer.

Learning resources

Solution - Spoilerwarning

Solution Steps

Optional Bonus Challenge 6 - Secure on Azure

Goal

The goal of this exercise is to ...

  • secure the migrated Virtual Machines by enabling Defender for Cloud for Server

Actions

  • Enable Defender for Cloud

Success criteria

  • The migrated Servers are protected by Defender for Cloud for Servers

Learning resources

Solution - Spoilerwarning

Solution Steps

Optional Bonus Challenge 7 - Modernize with Azure

Goal

The goal of this exercise is to ...

  • modernize the Web App running on the frontend Servers to be hosted on PaaS instead of IaaS (Lift & Shift)
  • understand the options that are available for App Services assessment & migration

Actions

  • Create a web app assessment using Azure Migrate
  • Preform a web app migration using Azure Migrate towards Azure App Services

Success criteria

  • An assessment has been performed using the already deployed infrastructure.
  • An migration has been performed towards PaaS instead of IaaS.
  • The App Services are accessible using the source Load Balancer.

Important

Currently [July 2024], At-Scale Discovery, Assessment and Migration is supported for ASP.NET web apps deployed to on-premises IIS servers hosted on VMware Environment.

Learning resources

Solution - Spoilerwarning

Solution Steps

Optional Bonus Challenge 8 - Deploy AI chat in App Service and secure with Defender for Cloud

Goal

The goal of this exercise is to ...

  • deploy an AI chat application in Azure App Service
  • validate security integration with Microsoft Defender for Cloud

Actions

  • Create a new Azure OpenAI Service
  • Deploy a model and test it in AI Foundry
  • Deploy the AI chat application code to the App Service
  • Integrate your web app with Defender for Cloud
  • Test the security integration and guardrails.

Success criteria

  • The AI chat application is running in Azure App Service
  • The application is accessible via a public URL

Learning resources

Solution - Spoilerwarning

Solution Steps

Finish

Congratulations! You finished the Migrate and Secure to be AI Ready Microhack. We hope you had the chance to learn about the how to implement a successful migration strategy using Azure Migrate. If you want to give feedback please don’t hesitate to open an Issue on the repository or get in touch with one of us directly.

Thank you for investing the time and see you next time!

Contributors