Modernize and Move your Microsoft Applications on AWS

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Rebeker Choi, Solutions Architect, AWS
November 2017
Modernize and Move your
Microsoft Applications on AWS

Sponsor

What to Expect from the Session
• The Fundamentals
• Best Practices of Deploying
• Microsoft Applications on AWS
• SQL Server
• Active Directory

Flexible
Why Are Customers Migrating Windows
Applications to AWS?
Secure Reliability & Scalability High-Performance Cost-Effective Extensive
Optimization for Windows-based workloads
Wide range of scalable services
Alignment with business needs

The Fundamentals

Availability Zone (AZ)
Single
digit msNetwork
multiple tier‐1 transit providers
Power
isolated electrical grids, UPS, onsite backup generator
Geo
isolated fault lines flood plains
Network
Power
Geo
Zone A Zone B

Availability Zone (AZ)
Zone A Zone B
Network
Power
Geo
Network
Power
Geo
Web
DB Master
Load
Balancer
DB Slave
Web
Storage StorageSingle
digit ms

Availability Zone - A
Availability Zone - B
The Fundamentals - Multi-AZ Deployment
Private SubnetPrivate SubnetPublic Subnet
10.1.0.0/16
10.1.1.0/24
10.1.2.0/24
10.1.3.0/24
10.1.4.0/24
10.1.5.0/24
10.1.6.0/24

SQL
SQL
WEB /
App
WEB /
App
Load Balancer
10.1.0.0/16
TCP 80
Users

Web Security Group
Accept Port 80 from LB
SQL Security Group
Accept Port 1433 from Web
WEB /
App
WEB /
App
SQL
SQL
TCP 80
Load Balancer
TCP 80
TCP 80
TCP 1433
10.1.0.0/16
Users

Web Security Group
SQL Security Group
Users Load Balancer
Auto-
Scaling
Group
WEB /
App
WEB /
App
Always-On
Availability
Group or
Amazon
RDS
SQL
SQL
10.1.0.0/16

Web Security Group
SQL Security Group
Users Load Balancer
Auto-
Scaling
Group
WEB /
App
WEB /
App
Always-On
Availability
Group or
Amazon
RDS
SQL
SQL
10.1.0.0/16
Route 53 or other DNS
www.example.com ->
xxx.us-west2.elb.amazonaws.com

Web Security Group
SQL Security Group
Users Load Balancer
Auto-
Scaling
Group
WEB /
App
WEB /
App
Always-On
Availability
Group or
AWS RDS
SQL
SQL
10.1.0.0/16
Route 53 or other DNS
www.example.com ->
Corporate
Office
IPSec VPN /
Direct Connect

Deploying Web/App Tier

AWS Elastic Beanstalk vs. Amazon EC2
Your code
Managed by
Elastic Beanstalk
Focus on building
your application
HTTP server
Application
server
Language
interpreter
Operating
system
Host
HTTP/Application
server
Operating
system
Host
Your code
Managed by
Customer
Managed by
AWS
Elastic Beanstalk EC2

Elastic Beanstalk
• Preconfigured infrastructure:
• Single-instance (dev, low cost)
• Load-balanced, Auto Scaling (production)
• Web and worker tiers
• Elastic Beanstalk provisions necessary
infrastructure resources, such as the load
balancer, Auto Scaling group, security groups,
database (optional), etc.

Information required to deploy an application
01
02
03
04
Region
Stack type
Single-instance
Load balanced with
autoscaling
Or
Database (RDS) Optional
Your code
Supported platforms

AWS Toolkit for Visual Studio
• Full integration in Visual Studio
• Deploy from Visual Studio
AWS Toolkit
for Visual
Studio
Deploy code to AWS
Select AWS Region
Select AWS Service

Deploying SQL Server

Database Tier – Deployment Options

Database Tier – Deployment Options
Amazon RDS for SQL Server SQL Server on Amazon EC2
Versions Supported: 2008 R2, 2012, 2014, 2016 2005, 2008, 2008 R2, 2012, 2014, 2016, 2017
Editions Supported: Express, Web, Standard, Enterprise
High Availability: Self-managed; AlwaysOn, Mirror, Log ShipAWS-managed
Encrypted storage using AWS KMS (all editions); TDE supportEncryption:
Authentication: Windows & SQL authentication
Maintenance plans & third-party toolsManaged automated backupsBackups:
Self-managedAutomatic software patchingMaintenance:

Multi-AZ Always-On Availability Group
Availability Zone A
Private Subnet
Primary
Replica
Availability Zone B
Private Subnet
Secondary
Replica
Synchronous Commit
Automatic Failover
Primary: 10.0.2.100
WSFC: 10.0.2.101
AG Listener: 10.0.2.102
Primary: 10.0.3.100
WSFC: 10.0.3.101
AG Listener: 10.0.3.102
AG Listener:
ag.awslabs.net
SQL Server running on EC2 – High Availability

Amazon RDS – On-Demand, Pay-as-you-go
AWS deals with Microsoft on
licenses

Amazon RDS - Flexibility of Choices
Flexibility of Choices on MS
SQL server engine version

Amazon RDS – built-in Multi-AZ deployment
For high availability:-
• Automatic failover
• Synchronous replication
across AZs

Amazon RDS is simple and fast to scale
• Scale up or down among
instance types on demand
• Minimal downtime for
multi-AZ deployment
• Select your window to
apply the change

Amazon RDS – consistent IOPS performance
Provisioned IOPS is available
for IOPS demanding database
workload

Amazon RDS – consistent IOPS performance
VPC support
• Web / application servers
can access SQL database
via private IP addresses

Amazon RDS - High availability
Availability Zone A
AWS Region
10.1.0.0/16
10.1.1.0/24
Availability Zone B
10.1.2.0/24
Synchronous replication
Same instance
type as master
Automatic failover
Synchronous replication
Private subnet Private subnet

Migrating data to and from Amazon RDS
AWS Database Migration Service
Minimize downtime during migrations, migrate on-
premises SQL server to RDS for SQL or SQL server running
on EC2
Amazon RDS Native Backup / Restore
Store your existing SQL Server backups ‘.bak’ files in
Amazon S3 and restore them on Amazon RDS
1
2
3 AWS Marketplace
Third-party data import and export tools and solutions

Deploying Active Directory

Microsoft AD Options for AWS Workloads
• Enable users to use Single Sign-On (SSO) on corporate applications
• Domain join EC2 instances to Active Directory environment
• Provide central application/resources access management using groups
• Three deployment options:
AWS VPC
AWS Microsoft
AD DC
AD
AWS VPC
EC2 Windows
Server DC
AD
On-premises
Windows Server
DC
AD
self-managed self-managed AWS-managed

Application
Availability Zone
Private Subnet (10.0.2.0/24)
SQL
Server
App
Server
IIS
Server
Availability Zone
SQL
Server
App
Server
IIS
Server
Remote
Users / Admins
Example: Domain join EC2 to on-premises AD
Domain Controllers
company.local
DC
corporate data center
VPN
Connection
DBAPPWEB
DBAPPWEB
Auth/
LDAP
Auth/
LDAP

Availability Zone
DBAPPWEB
SQL
Server
App
Server
IIS
Server
Availability Zone
DBAPPWEB
SQL
Server
App
Server
IIS
Server
Remote
Users / Admins
Domain Controllers
company.local
DC
VPN
Connection
DC
Domain
Controller
DC
Domain
Controller
AD Replication (company.local)
Auth/
LDAP
Auth/
LDAP
Application
Auth/
LDAP
Example: AD on EC2 with AD replication

Auth/
LDAP
Auth/
LDAP
Availability Zone
APPWEB
App
Server
IIS
Server
Availability Zone
APPWEB
App
Server
IIS
Server
Remote
Users / Admins
Domain Controllers
company.local
DC
VPN
Connection
AWS Directory Service
DC
Domain
Controller
DC
Domain
Controller
Application
SQL
SQL
Server
APP
SQL
Server
Example: AWS Microsoft AD with AD trust to on-premises
Auth/
LDAP
company.cloud
AD Trust

https://aws.amazon.com/quickstart
AWS Quick Starts for Microsoft
Deploy complete Microsoft Solutions for free
including:
o SQL Server, Exchange, SharePoint, & Lync
o Windows PowerShell DSC
o Active Directory Domain Services
o Web Application Proxy and AD FS
o Remote Desktop Gateway
AWS Quick Starts follow architectural best
practices from AWS and Microsoft.

Key Takeaways
High Availability
• Multi-AZ deployment for production workload
• Single-AZ deployment for dev/test workload
Focus more on your application development by
• offloading underlying infrastructure O&M to AWS
• leveraging AWS managed services if possible (Amazon RDS, AWS Elastic
Beanstalk & AWS Directory Service)

AWS Facebook Hong Kong Page

Remember to complete
your evaluations!Remember to complete
your evaluations!

Thank you!
rebeker@amazon.com

Modernize and Move your Microsoft Applications on AWS

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à Modernize and Move your Microsoft Applications on AWS

Similaire à Modernize and Move your Microsoft Applications on AWS (20)

Plus de Amazon Web Services

Plus de Amazon Web Services (20)

Modernize and Move your Microsoft Applications on AWS