Agent-based migration architecture
This article provides an overview of the architecture and processes used for agent-based replication of VMware VMs with the Migration and modernization tool.
Note
This end-to-end VMware migration scenario documentation is currently in preview. For more information about using Azure Migrate, see the Azure Migrate product documentation.
Using the Migration and modernization tool, you can replicate VMware VMs with a couple of options:
- Migrate VMs using agent-based replication, as described in this article.
- Migrate VMware VMs using agentless replication. This migrates VMs without needing to install anything on them.
Learn more about selecting and comparing migration methods for VMware VMs.
Agent-based migration
Agent-based migration is used to migrate on-premises VMware VMs and physical servers to Azure. It can also be used to migrate other on-premises virtualized servers, as well as private and public cloud VMs, including AWS instances, and GCP VMs. Agent-based migration in Azure Migrate uses some backend functionality from the [Azure Site Recovery]../../site-recovery/site-recovery-overview.md) service.
Architectural components
The diagram illustrates the components involved in agent-based migration.
The table summarizes the components used for agent-based migration.
| Component | Details | Installation |
|---|---|---|
| Replication appliance | The replication appliance (configuration server/process server) is an on-premises server that acts as a bridge between the on-premises environment, and the Migration and modernization tool. The appliance discovers the on-premises server inventory, so that the Migration and modernization tool can orchestrate replication and migration. The appliance has two components: Configuration server: Connects to the Migration and modernization tool and coordinates replication. Process server: Handles data replication. The process server receives server data, compresses, and encrypts it, and sends to Azure. In Azure, the Migration and modernization tool writes the data to managed disks. |
By default the process server is installed together with the configuration server on the replication appliance. |
| Mobility service | The Mobility service is an agent installed on each server you want to replicate and migrate. It sends replication data from the server to the process server. | Installation files for different versions of the Mobility service are located on the replication appliance. You download and install the agent you need, according to the operating system and version of the server you want to replicate. |
Mobility service installation
You can deploy the Mobility Service using the following methods:
- Push installation: The process server installs the Mobility service when you enable protection for a server.
- Install manually: You can install the Mobility service manually on each server through UI or command prompt.
The Mobility service communicates with the replication appliance and replicated servers. If you have antivirus software running on the replication appliance, process servers, or servers being replicated, the following folders should be excluded from scanning:
- C:\Program Files\Microsoft Azure Recovery Services Agent
- C:\ProgramData\ASR
- C:\ProgramData\ASRLogs
- C:\ProgramData\ASRSetupLogs
- C:\ProgramData\LogUploadServiceLogs
- C:\ProgramData\Microsoft Azure Site Recovery
- C:\Program Files (x86)\Microsoft Azure Site Recovery
- C:\ProgramData\ASR\agent (on Windows servers with the Mobility service installed)
Replication process
- When you enable replication for a server, initial replication to Azure begins.
- During initial replication, the Mobility service reads data from the server disks, and sends it to the process server.
- This data is used to seed a copy of the disk in your Azure subscription.
- After initial replication finishes, replication of delta changes to Azure begins. Replication is block-level, and near-continuous.
- The Mobility service intercepts writes to disk memory, by integrating with the storage subsystem of the operating system. This method avoids disk I/O operations on the replicating server, for incremental replication.
- Tracked changes for a server are sent to the process server on inbound port HTTPS 9443. This port can be modified. The process server compresses and encrypts it, and sends it to Azure.
Ports
| Device | Connection |
|---|---|
| Replicating servers | The Mobility service running on VMs communicates with the on-premises replication appliance on port HTTPS 443 inbound, for replication management. Servers send replication data to the process server on port HTTPS 9443 inbound. This port can be modified. |
| Replication appliance | The replication appliance orchestrates replication with Azure over port HTTPS 443 outbound. |
| Process server | The process server receives replication data, optimizes, and encrypts it, and sends it to Azure storage over port 443 outbound. |
Performance and scaling
By default, you deploy a single replication appliance that runs both the configuration server and the process server. If you're only replicating a few servers, this deployment is sufficient. However, if you're replicating and migrating hundreds of servers, a single process server might not be able to handle all the replication traffic. In this case, you can deploy additional scale-out process servers.
Plan VMware deployment
If you're replicating VMware VMs, you can use the Site Recovery Deployment Planner for VMware, to help determine performance requirements, including the daily data change rate, and the process servers you need.
Replication appliance capacity
Use the values in this table to figure out whether you need an additional process server in your deployment.
- If the daily change rate (churn rate) is over 2 TB, deploy an additional process server.
- If you're replicating more than 200 servers, deploy an additional replication appliance.
| CPU | Memory | Free space-data caching | Churn rate | Replication limits |
|---|---|---|---|---|
| 8 vCPUs (2 sockets * 4 cores @ 2.5 GHz) | 16 GB | 300 GB | 500 GB or less | < 100 servers |
| 12 vCPUs (2 sockets * 6 cores @ 2.5 GHz) | 18 GB | 600 GB | 501 GB to 1 TB | 100-150 servers. |
| 16 vCPUs (2 sockets * 8 cores @ 2.5 GHz) | 32 GB | 1 TB | 1 TB to 2 TB | 151-200 servers. |
Sizing scale-out process servers
If you need to deploy a scale-out process server, use this table to figure out server sizing.
| Process server | Free space for data caching | Churn rate | Replication limits |
|---|---|---|---|
| 4 vCPUs (2 sockets * 2 cores @ 2.5 GHz), 8-GB memory | 300 GB | 250 GB or less | Up to 85 servers |
| 8 vCPUs (2 sockets * 4 cores @ 2.5 GHz), 12-GB memory | 600 GB | 251 GB to 1 TB | 86-150 servers. |
| 12 vCPUs (2 sockets * 6 cores @ 2.5 GHz), 24-GB memory | 1 TB | 1-2 TB | 151-225 servers. |
Throttle upload bandwidth.
VMware traffic that replicates to Azure goes through a specific process server. You can limit upload throughput by throttling bandwidth on the servers that are running as process servers. You can influence bandwidth using this registry key:
The HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Azure Backup\Replication\UploadThreadsPerVM registry value specifies the number of threads that are used for data transfer (initial or delta replication) of a disk. A higher value increases the network bandwidth that's used for replication. The default value is four. The maximum value is 32. To optimize the value, monitor the traffic.
In addition, you can throttle bandwidth on the process server as follows:
- On the process server, open the Azure Backup MMC snap-in. There's a shortcut on the desktop or in the folder C:\Program Files\Microsoft Azure Recovery Services Agent\bin.
- In the snap-in, select Change Properties.
- In Throttling, select Enable internet bandwidth usage throttling for backup operations. Set the limits for work and non-work hours. Valid ranges are from 512 Kbps to 1,023 Mbps.
Next steps
Try out agent-based migration for VMware