Microsoft Multi-Country

Virtual Academy
May 12 – Data & AI Day
May 13 – MW Day
May 14 – BizApps Day
May 15 – Apps & Infra Day
Ioannis Stavrinides
Sr. Cloud Solution Architect
Data & AI, CEE OCP
//build

https://register.build.microsoft.com/
Customers looking to migrate a large
number of apps from on-premise or IaaS,
self-built or ISV provided, with as low
migration effort as possible & cost being
a crucial factor
VNET support in SQL Database Managed Instance
Azure SQL Database offers the most cost-effective path to the cloud
SQL Server license trade-in values
SQL Database vCore-based options

SQL Server with Software Assurance

 Up to 55% Up to 80%
savings2 savings3

License included With Azure Hybrid Benefit Reserved Instances with

Azure Hybrid Benefit

1 Savingsbased on eight vCore Managed Instance Business Critical in East US Region, running 730 hours per month. Savings are calculated from full price (license included) against base rate (applying Azure Hybrid Benefit for SQL Server), which excludes
Software Assurance cost for SQL Server Enterprise edition, which may vary based on EA agreement. Actual savings may vary based on region, instance size and performance tier. Prices as of May 2018, subject to change.
2 Savings based on eight vCore SQL Database Managed Instance Business Critical in West 2 US Region, running 730 hours per month. Savings are calculated from on demand full price (license included) against base rate with Azure Hybrid Benefit plus 3-year
reserved capacity commitment. Savings excludes Software Assurance cost for SQL Server Enterprise edition, which may vary based on EA agreement. Actual savings may vary based on region, instance size and performance tier. Prices as of May 2018,
subject to change.
Your work so far How SQL Database helps

Hardware purchasing and management Built-in scale on-demand

Protect data with backups (with health checks and retention) Built-in point-in-time restore

High availability implementation Built-in 99.99% SLA and auto-failover

Disaster recovery implementation Built-in geo-redundancy and geo-replication

Ensure compliance with standards on your own Built-in easy to use features

Secure your data from malicious users and mistakes Built-in easy to use features

Role out updates and upgrades Built-in updates and upgrades

Monitor, troubleshoot, and manage at scale Built-in easy to use features

Tune and maintain for predictable performance Built-in easy to use features

We take care of your database chores

 Who is Managed
Instance for?
SQL
Customers looking to migrate a
large number of apps from on-
premise or IaaS, self-built or ISV
provided, with as low migration
effort as possible & cost being a
crucial factor
 SQL Database
(PaaS)

Managed Single Elastic

Instance database Pool

• Built on the same • Fully-fledged SQL • Contained within • Transparent

infrastructure as instance with nearly your VNet • Frictionless
SQL Database 100% compat with • Private IP addresses • Competitive
• Provides the same on-premise • Express Route /
benefits (PaaS) VPN connectivity
Tired of managing hardware, software & business continuity?

You can stop doing it, Managed Instance has it built-in

Compute & storage provisioned on demand
Fast & online scaling
Full stack updates and patches

Backups with health checks

Point-in-time restore (configurable retention *)

99.99% availability with automatic failover

Disaster recovery with single geo secondary (multiple*)

* - features coming soon

Is it hard to secure data and ensure standards compliance?
Is it hard to monitor and tune all your workloads?

It’s much easier with the Managed Instance

Compliance with all major industry standards
Threat detection with automatic alerting

Intelligent query processing

Automatic performance tuning*

Monitoring at scale with Intelligent Insights

Data discovery and classification*
Vulnerability assessment

* - features coming soon

 SQL Database
(PaaS)

Managed Single Elastic

Instance database Pool

• Built on the same • Fully-fledged SQL • Contained within • Transparent

infrastructure as instance with nearly your VNet • Frictionless
SQL Database 100% compat with • Private IP addresses • Competitive
• Provides the same on-premise • Express Route /
benefits (PaaS) VPN connectivity
 Save time with
familiar SQL
Server tools and
resources

Eliminate app changes with full SQL

Server programming surface

Use familiar SQL Server features in SQL

Database Managed Instance
 Database Migration Service
Tools for your
journey to the cloud

Seamless and compatible

 Azure Database Migration Service
Accelerating your
journey to the cloud

MySQL SQL

SQL Server

MySQL

PostgreSQL

Oracle

More…
How many of your applications could migrate today?

Cross-DB queries & transactions, linked servers to SQL

.NET CLR modules
Service Broker
Change Data Capture
Transactional Replication

Choice of instance collations* and instance time zone*

R services*

MSDTC for distributed transactions

Filestream / Filetable, Polybase
* - features coming soon
Will your IT face a steep learning curve or feel loss of control?

DMVs, XEvents, Query Store

SQL Agent and DB Mail
sysadmin privileges and Resource Governor

Built-in HA replaces on-prem setups

Replace MDW with OMS monitoring

SQL Auditing, Row Level Security

TDE, Always Encrypted, and Dynamic Data Masking
Network security with VNETs and private IPs
Integrated auth. with Azure AD
 SQL Database
(PaaS)

Managed Single Elastic

Instance database Pool

• Built on the same • Fully-fledged SQL • Contained within • Transparent

infrastructure as instance with nearly your VNet • Frictionless
SQL Database 100% compat with • Private IP addresses • Competitive
• Provides the same on-premise • Express Route /
benefits (PaaS) VPN connectivity
Dedicated
resources through
customer isolation
 SQL Database
(PaaS)

Managed Single Elastic

Instance database Pool

• Built on the same • Fully-fledged SQL • Contained within • Transparent

infrastructure as instance with nearly your VNet • Frictionless
SQL Database 100% compat with • Private IP addresses • Competitive
• Provides the same on-premise • Express Route /
benefits (PaaS) VPN connectivity
Capability \ Service tier General Purpose (GA) Business Critical (Public Preview)

Best for Apps with typical availability and Apps with highest availability and
common IO latency requirements lowest IO latency requirements.
Compute (vCores) 8, 16, 24, 32, 40, 64, 80 8, 16, 24, 32, 40, 64, 80

HA / Recovery Time Objective Remote storage based / Good Always On AG based / Better

Storage type / size Fast remote (Azure Premium) / Super-fast local SSD /
Up to 8 TB Up to 4 TB
Read scale out (read-only replica) No Yes

In-Memory OLTP No Yes

Price competitive with AWS? Yes, ~33% lower (license included) Yes, ~46% lower (license included)
PHYSICAL SECURITY
600
552

Vulnerabilities (2010 – 2018)

NETWORK SECURITY 500

CLUSTER SECURITY 400

300
ACCESS MANAGEMENT
207
200

THREAT PROTECTION
90
100
59
33
INFORMATION PROTECTION 17
0

CUSTOMER DATA
 PHYSICAL SECURITY

NETWORK SECURITY
PLATFORM SECURITY

ACCESS MANAGEMENT

THREAT PROTECTION

INFORMATION PROTECTION

CUSTOMER DATA
Legend:
certificate
Data verification
Management
Certificate
Certificate Authorities
Internet
Azure
VNet

TLS TLS

Management & Deployment Plane

Azure Azure SQL Database
Managed Instance
TLS Service dependencies
TLS Azure

Customer applications & tools

On-Premises + Azure VNet
Maintenance
Corpnet
On-premises network Spoke 1 virtual network
Hub virtual network
Workload subnet
Gateway Subnet DMZ Subnet

NVA
vnet peering

ExpressRoute ExpressRoute
Gateway Management subnet
circuit
Management subnet
JumpBox
JumpBox

Active Directory subnet Managed Instance subnet

Spoke 2 virtual network

Workload subnet

vnet peering

Management subnet

JumpBox
Be empty:

Have specific route table:

Optional custom DNS:

No Service endpoint:

Sufficient IP addresses:

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance-vnet-configuration#requirements
A Managed Instance must be deployed in an Azure Virtual Network
Allows for connecting directly from an on-premises network
Allows for connecting linked servers or other on-premises data stores
Allows for connecting to additional Azure resources

Plan your deployment

Managed Instance requires a minimum of 16 IP addresses in a subnet and may use up to 256 IP addresses
If deploying multiple Managed Instances inside the subnet, you need to optimize the subnet size
The default values create a subnet that takes all the VNet address space, allowing for only Managed
Instance inside the virtual network

Routes
Effective routes on the Managed Instance subnet are not supported
Routes can be user-defined (UDR) or Border Gateway Protocol (BGP) routes propagated to network
interfaces through ExpressRoute or site-to-site VPN connections
For BGP routes, create a 0.0.0.0/0 Next Hop Internet route and apply it to the Managed Instance subnet

Network Security Groups (NSG)

NSGs on the Managed Instance subnet are not supported
Considerations when creating a new Virtual Network for Managed Instance

• Calculate the subnet size

• Assess the needs for the rest of the Vnet

• Disable Service end points

• Create new ARM Virtual Network

Name Any valid name

Address space Any valid address range, such as 10.14.0.0/24
Subscription Your subscription
Resource Group Any valid resource group (new or existing)
Location Any valid location
Subnet name Any valid subnet name, such as mi_subnet
Subnet address range Any valid subnet address, such as 10.14.0.0/28. Use a subnet address space smaller than the address space itself to allow space to
create other subnets in the same VNet, such as a subnet for hosting test / client apps or gateway subnets to connect from on-prem
or other VNets.
Service endpoints Disabled
Create the required route table and associate it

• Create new Route table

• 0.0.0.0/0 Next Hop Internet**

• Associate route table with the Managed Instance subnet

Name Any valid name

Subscription Your subscription

Resource Group Select the resource group you created in the previous procedure

Location Select the location you specified in the previous procedure

Disable BCP route propagation Enabled

 Data center network

Web tier Business tier Data tier

Internet
Load Load Load SQL HA
balancer balancer balancer Cluster

Management Active Directory

JumpBox
 Data center network

Web tier Business tier Managed Instance

subnet subnet subnet

Internet

Azure Load
application balancer
gateway

Management subnet

Azure Active JumpBox

Directory
 PHYSICAL SECURITY

Enhanced monitoring
NETWORK SECURITY
Collecting of low-fidelity
PLATFORM SECURITY anomalous activity
ACCESS MANAGEMENT
Monitoring PERF for traits
THREAT PROTECTION
Red Team / Blue Team
INFORMATION PROTECTION

CUSTOMER DATA
 VNet
SQL

GW
Node mymi.<clusterid>.database.windows.net
primary node
TLS
ILB
GW
Windows Firewall TDS endpoint
Node (Private IP)

SQL
TLS
SQL Engine
Management
Node Agent
TLS
LB Node
SQL Management GW
(Public IP)
Virtual cluster

SQL Management (public IP) TDS endpoint (private IP)

We assume breach…
Enhanced monitoring of our Azure Assets
Collection of low-fidelity anomalous activity (automated hunting)
Monitoring PERF for traits of crypto currency mining
… and large set of other detections that we don’t talk about publicly

Attack team, SQL Red Team, tries to get in, gain a foothold, escalate privileges,
and maintain persistence
SQL Blue Team practices defense-in-depth

When we detect something, e.g., failed login attempts, we defend…

If it involves customer, we will notify
Many times this is the customer’s own security and compliance scanners!
 PHYSICAL SECURITY Azure Active Directory

Provides an alternative to SQL

NETWORK SECURITY authentication.

PLATFORM SECURITY Helps to stop the proliferation of user

identities across Azure SQL logical
ACCESS MANAGEMENT servers and SQL DBs

THREAT PROTECTION Use benefits provided by Azure AD

INFORMATION PROTECTION

CUSTOMER DATA
 Simplified Can help you
Central ID Permission Eliminate Storing
Management Management Passwords

Universal /
Flexible Supported in many
Interactive
Configuration Tools and Drivers
Authentication
Row-level security

Data Discovery & Classification

Data Masking (dynamic, static in private preview)

 PHYSICAL SECURITY
SQL Auditing
Integration with Log Analytics
and Event Hubs for SQL DB
NETWORK SECURITY Singletons/pools (coming to
M.I. soon)
PLATFORM SECURITY

ACCESS MANAGEMENT Advanced Threat

Protection
THREAT PROTECTION Vulnerability Assessment

INFORMATION PROTECTION Threat Monitoring (3 classes

of threats)

CUSTOMER DATA
SQL Auditing

Advanced Threat Protection

 PHYSICAL SECURITY Encryption-in-flight
(aka. Transport Layer Security TLS)

Encryption-at-rest
NETWORK SECURITY (aka. Transparent Data Encryption TDE)
Service- or User-managed keys Backup
PLATFORM SECURITY encryption

ACCESS MANAGEMENT Encryption-in-use

(Always Encrypted)*
THREAT PROTECTION
Key management with
INFORMATION PROTECTION Azure Key Vault

CUSTOMER DATA
 Azure SQL Database
Azure Active Directory

Active Directory

Application
SSMS
SSDT
Connection string-based authentication ADO.NET 4.6
SQL package
General Purpose
Feature Description
Number of vCores* 8, 16, 24 (Gen 4)
8, 16, 24, 32, 40, 64, 80 (Gen 5)
SQL Server version / build SQL Server (latest available)
Min storage size 32 GB
Max storage size 8 TB
Max storage per database Determined by the max storage
size per instance
Expected storage IOPS 500-7500 IOPS per data file
(depends on data file).
See Premium Storage
Number of data files (ROWS) Multiple
per the database
Number of log files (LOG) 1
per database
Managed automated backups Yes
HA Based on remote storage and
Azure Service Fabric
Built-in instance and database Yes
monitoring and metrics
Automatic software patching Yes
VNet - Azure Resource Yes
Manager deployment
VNet - Classic deployment No
model
Portal support Yes
Business Critical
Feature Description
Number of vCores* 8, 16, 24, 32 (Gen 4)
8, 16, 24, 32, 40, 64, 80 (Gen 5) Always On AG
SQL Server version / build SQL Server (latest available)
Additional features In-Memory OLTP
1 additional read-only replica (Read
Scale-Out) Super-fast SSD
Min storage size 32 GB
SQL SQL
Max storage size •Gen 4: 1 TB (all vCore sizes
Gen 5:1 TB for 8, 16 vCores
•2 TB for 24 vCores Primary replica Secondary replica
•4 TB for 32, 40, 64, 80 vCores
Max storage per database Determined by the max storage size
per instance
Number of data files (ROWS) Multiple
per the database
SQL SQL
Number of log files (LOG) per 1
database
Managed automated backups Yes Secondary replica Secondary replica
HA Based on Always On Availability
Groups and Azure Service Fabric
Built-in instance and database Yes
monitoring and metrics
Automatic software patching Yes
VNet - Azure Resource Yes
Manager deployment
VNet - Classic deployment No Business Critical service tier: collocated compute and storage
model
Portal support Yes
Built-in high
availability DB

Availability group
Ack Read
value write

Ack P Write

Write Ack

S S
 Surface area of MI is always on latest and greatest SQL engine version

Managed Instance

Always on the latest and greatest SQL Your code can be SQL deployment model aware if
engine version necessary

Your code can be SQL deployment

model aware if necessary

Note: current limitation being removed Current limitations (will be removed later this year)
later this year
 Database Microsoft Database Compatibility Level Protection

Compatibility Based
Certification
Overall process

Microsoft database compatibility level

protection

Easy to use tools to help you access

migration Contact Microsoft
Provides an alternative to SQL Server authentication so database permissions can be managed via external (Azure AD) groups
Supports:
Token-based authentication for applications connecting to SQL Database
ADFS or native user/password authentication for a local Azure Active Directory without domain synchronization
Multi-Factor Authentication (MFA)
Windows logins are not supported
CREATE LOGIN... FROM WINDOWS is not permitted

SQL logins are fully supported when created using:

FROM CERTIFICATE
FROM ASYMMETRIC KEY,
FROM SID

Azure AD user who creates the Managed Instance has unrestricted administrative privileges by default
This can be changed from an individual to a security group account

Azure AD non-admin database users can be created using CREATE USER… FROM EXTERNAL PROVIDER syntax
Managed Instance cannot access file shares and Windows folders

Only CREATE ASSEMBLY FROM BINARY is supported

CREATE ASSEMBLY FROM FILE is not supported

ALTER ASSEMBLY can’t reference files

Built into Managed Instance
Azure SQL Database requires using on-premises SQL Server Agent, Azure Automation, Elastic Jobs, or PowerShell

Always running
Services cannot be stopped or restarted like they can with on-premises
Option to auto-restart SQL Server if it stops unexpectedly is disabled
Option to auto-restart SQL Server Agent if it stops unexpectedly is disabled

Forwarding SQL Server events is disabled

On-premises SQL Server Agent allows for forwarding events to another server but this is currently not an option for a Managed Instance

Connection
Alias local host server is predefined for a Managed Instance, whereas on-premises SQL Server Agent allows that to be configured if needed

Creating jobs
Creating jobs is as simple and easy as on-premises
Jobs can be created using the UI or T-SQL

Alert System
Functions the same as on-premises for sending email alerts

SQLCMD
Cannot be called within a SQL Server Agent job
Can be used to connect to a Managed Instance
Service broker is on by default for all user databases

Cross-instance service broker is not supported

CREATE ROUTE does not work with ADDRESS other than LOCAL
ALTER ROUTE does not work with ADDRESS other than LOCAL
Fully supported in Managed Instance
Functions the same as on-premises to set up and use

Azure SQL Database does not have Database Mail support

Supported
Snapshot replication. Same functionality as on-premises
Transactional replication

Unsupported
Peer-to-peer replication
Merge replication
Heterogeneous replication
Oracle publisher
For comparison, Azure SQL Database only supports being a transactional replication push subscriber

Some restrictions when used with a Managed Instance

Updatable subscriptions are not permitted
Publisher and distributor must be in the same location
If publisher and distributor are in a Managed Instance, Azure file share must be used to store data and schema from the publication
Connections to the Distributor must use SQL authentication

Additions to support Managed Instance

New fields have been added in replication-related tables in msdb
job_login, job_password, storage_connection_string
SSMS replication wizard supports using a Managed Instance
 Microsoft Database Compatibility Level Protection

Database
Compatibility Based
Certification

Microsoft database compatibility level Overall process

protection
Easy to use tools to help you access
migration
App Features with a better alternative in Azure

compatibility:
what’s is missing?

Retired features

Features considered post-GA

 Data file default initial size is 16MB with 16MB auto growth

User Database File These can and should be adjusted for your workload

File size limit is 8TB in General Purpose

Layout Considerations
Log file default initial size is 8MB with 16MB auto growth

This can and should be adjusted for your workload

Additional data files/filegroups can be added

Only using an ALTER DATABASE statement and the FILENAME clause is

not permitted

Paths and File Names are chosen for you

Different from Azure SQL Database where additional files are not
allowed

Multiple log files are not suppor ted (and should not be needed)

A backup with multiple files/filegroups can be restored

Each user database has a FILESTREAM filegroup for In -Memor y OLTP

checkpoint files

Multiple log files are not suppor ted (and should not be needed)
 Tempdb Tuning Options
Tempdb Data File
Considerations
Additional tempdb data files can be created if needed

Well-known tempdb tuning ‘fixes’ are on by default

Tempdb Resizing
 Database backup schedule is the same as Azure SQL
Backups are Database

automatic

COPY_ONLY, URL-based backups can be used to

perform manual full database backups

Backup retention is 7 days by default

Restore Point-in-time restores are possible and must be performed manually
using the Azure Portal

considerations Restoring automated backups from within SSMS is not allowed

You can only restore using the Azure Portal

COPY_ONLY, URL-based full backups can be restored using SSMS to

a Managed Instance only

Cannot be restored to on-premises as Managed Instance uses a

higher build than on-premises instances

Databases with multiple log files cannot be restored

Secondary log files must be removed prior to backing up and

restoring to a Managed Instance

Can restore backups in a specific DB Compatibility

Supports up to SQL 2005

 Azure Traffic Manager
User device

End user traffic

Capabilities Ingress LB Ingress LB

▪ Active / Standby
DNS zone
▪ All databases in the instance are
automatically replicated Geo-replication
▪ Automatic or manual failover
▪ Read-write listener for read-write
database connections Application
Application VM
Application VM
Application VM
▪ Read-only listener for read-intended
DB traffic Failover group
database connections listener

Scenarios
▪ Transparent recovery from outage VNET VNET

▪ Load-balancing read-only workloads

▪ Failback after outage is mitigated
Primary region Secondary region
 Azure SQL Analytics

Intelligent
performance
monitoring
Telemetry
stored for
30* days
Elastic pools Log
Analytics
queries

Azure SQL Custom

Database Alerting Performance monitoring dashboard
Diagnostics
Managed telemetry
Instances
Stream
Analytics
Azure SQL
Partner
Databases database monitoring tools
in managed Event
instance Hub

Function
Azure s

Storage App
services Custom integrations
Data Migration Assistant (DMA) Azure SQL Database
Managed Instance

Azure Hybrid Benefit for SQL Server Azure Database Migration Service (DMS)
Data Migration Assistant (DMA)

Azure Hybrid Benefit for SQL Server

Azure SQL Database Managed Instance
 Azure migration center
Provides guidance, tools, and partners in
context of your migration scenario
Azure Database Migration Service

SQL DB
 Microsoft Subscription Customer Subscription On-Premise

On-premises
network

Azure Storage Account My

Azure Portal

Subnet used for DMS

Virtual Machine
PowerShell DMS Resource
Provider

M
y
CLI commands
Service Bus Queue
Assess Migrate Optimize
 Post-migration

Optimize
Pre-migration Migration Based on the tests you
performed, address any
performance issues, and
then retest to confirm the
performance improvements

Discover Assess Convert Migrate schema, Data sync Cutover Remediate

data & objects applications
Inventory Assess workloads Convert the Migrate the source Sync your target Cut over from the Iteratively make any
database assets, and fix source schema to schema, and then schema and data source to the target necessary changes
and application recommendations work in the target migrate the source with the source. This environment. This is to your applications
stack discovery environment. This data to the target is only relevant for only relevant for Run functional &
is only relevant for minimal-downtime minimal-downtime performance tests
heterogeneous migrations migrations Iteratively run
migrations. functional and
performance tests
SQL Migrate
Enables optimization
Enables rehosting or during or post migration
light refactoring for (fully managed service)
most apps

Assess Migrate Optimize

Eliminates the need IaaS (virtual machines)
to rearchitect or fall short here
rebuild your apps
Seamless, end to end solution | Near-zero downtime | Resilient | Migrate at-scale from multiple sources

On-premises

SQL Azure SQL Database

SQL Server 2005 - 2017

SQL Server on
Azure VMs

Assessment Azure Database Cosmos DB

SSMA & DMA Migration Service

My

Azure Database for MySQL,

PostgreSQL and MariaDB
Assessment + Optimize

Target Recommendation SKU Recommendation Detailed Assessment Performance Validation

Which Azure target is best for me - SQL Which service\pricing tier should I pick Is my database ready to migrate? Validate how my DB will perform in Azure
DB, MI or VM within the target

Multiple databases at a time 1 machine at a time (no DB limit) Multiple databases at a time 1 database at a time

Collect DMV
Create config file Create config file Capture workload
statistics from
with databases with databases from your source
machine hosting
you want to assess you want to assess databases
your databases

Run target Run SKU Run detailed

Replay capture on
recommendation recommendation assessment using
current and
using DMA using DMA DMA UX or
planned targets
command line command line command line

Yes

PowerBI report Recommendations Get compatibility

Generate analysis
that gives an in JSON, CSV and and feature parity
report
overview HTML formats issues

Provision Analysis report has

Have more Fix and rerun
databases in Azure query correctness
databases to assessments to
with the and performance
assess? confirm readiness
recommendations (source vs target)

No

Consolidate
multiple
assessments into a
single report
Target Recommendation SKU Recommendation
Create database config file Collect DMV statistics from your database

Run target recommendation using DMA CLI Run SKU recommendation using DMA CLI

Power BI report
Assess on-premises SQL Server instance(s)
for migrating to Azure SQL database(s)

Discover issues that can affect an upgrade

Migrate an on-premises SQL Server instance

to a modern SQL Server instance
SQL Server to Azure SQL Database Managed Instance example
1 Virtual Network (VNET)

Subnet used for MI

2

3
Cloud network Azure Blob Storage

4 4
2
SQL DB
Managed Instance

Subnet used for DMS

SMB Network Share

1

On-premises
 Customer subscription On-premises

Database endpoint
Azure Portal

Data movement
PowerShell

Cloud DMS control communication

443 (SSL) outbound only

CLI commands Azure Database DMS hybrid worker running on-premises

Migration Service

Classified as Microsoft Confidential

Azure Database Migration Service
https://azure.microsoft.com/services/database-migration/
Preview signup: https://aka.ms/dms-preview
Feedback alias: [email protected]
Channel 9 Video: Oracle migrations; Azure SQL Database migrations
Video: Online migrations to Azure SQL Database using Azure DMS
Video: Migrate MySQL applications to Azure with minimal downtime using the Azure Database Migration Service

Migration Guide
datamigration.microsoft.com
SQL Server Migration Assistant: https://docs.microsoft.com/sql/ssma/sql-server-migration-assistant
Database Migration Assistant: https://blogs.msdn.microsoft.com/datamigration/dma/
Database Experimentation Assistant: Download
Find a partner: http://migration/Pages/SearchPartners.aspx
Data Migration Team Blog: blogs.msdn.microsoft.com/datamigration/
 Running SSIS on-premises
OS: Windows/Linux

SCALABILITY: Scale-Out feature

EDITION: Standard/Enterprise

TOOLS: SSDT/SSMS to design/deploy/

manage/execute/monitor packages

EXTENSIBILITY: ISVs can build

components/extensions on SSIS
On-premises

PRICING: Bundled w/ on-prem SQL Server

SQL
SSIS
Data sources
SQL Server
 Running SSIS in the cloud
Azure Data Factory LIFT & SHIFT: Use Azure SQL DB/Managed
Instance to host SSISDB

SSIS Integration Runtime

SCALABILITY: Use ADF to provision a managed
SQL
cluster of Azure VMs dedicated to run your
packages – Azure-SSIS Integration Runtime (IR)
Data sources SSIS ETL SQL Database
Managed Instance
EDITION: Standard/Enterprise
Cloud

TOOLS: SSDT/SSMS + ADF app to

design/deploy/manage/execute/monitor
packages (activities)
On-premises

EXTENSIBILITY: ISVs can build

components/extensions + SaaS on SSIS in ADF
via custom setup + 3rd party licensing
SQL
SSIS
Data sources
SQL Server PRICING: Pay per hour + Azure Hybrid Benefit
to Bring Your Own License (BYOL)
 Running SSIS in the cloud
Azure Data Factory HYBRID: Join Azure-SSIS IR to a VNet that is
connected to your on-prem network to enable
on-prem data access
SSIS Integration Runtime
SQL
MODERNIZATION: Schedule first-class SSIS
Data sources SSIS ETL SQL Database
activities in ADF pipelines via SSMS and
chain/group them w/ other activities via ADF
Managed Instance
app
Cloud

COMPLEMENTARY: Splice/inject built-

in/custom/Open Source/3rd party SSIS tasks
VNET and transformations in ADF pipelines
On-premises

READINESS: General Availability (GA) w/ 24/7

live-site support
SQL
SSIS
Data sources
SQL Server
Enterprise Edition of Azure-SSIS IR allows you to use advanced/premium features

Some of these features will also require you to install additional components,
essentially customizing your Azure-SSIS IR (via Custom Setup Interface)
Custom setup allows you to add your own setup steps during the
provisioning/reconfiguration of your Azure-SSIS IR to:

Instructions

We support the installation of free/paid/(un)licensed components

To support the installation of paid/licensed components from our ISV partners, we
face challenges from the nature of Azure-SSIS IR as the nodes are volatile in the sense
that they can be allocated/released at any time

Binding a component installation to any particular node by collecting machine-specific

info that is traditionally used for on-prem installations, e.g. MAC address, CPU ID, etc.
isn’t viable anymore

We provide new unique and persistent Windows environment + SSIS system variables
for ISVs to bind/validate their component licenses on Azure-SSIS IR:
Azure SSIS IR Node

Container
SSIS Executor
 https://blogs.msdn.microsoft.com/ssis/

https://blogs.msdn.microsoft.com/ssis/2018/04/27/enterprise-edition-custom-setup-and-3rd-party-extensibility-for-ssis-in-adf/
 Business Intelligence
Services Power BI

Not installed side-by-side with

SSIS / SSAS PaaS
Managed Instance

Migrate your SSIS packages to new SSIS on

Azure Data Factory (PaaS service)
SQL
SQL Server
Migrate your OLAP models to Reporting Services
Azure Analysis Services

… or run these services in Azure

virtual machines

For SSRS: run in a virtual machine,

or switch to Power BI
SSIS/SSAS
Lift your SQL server Azure Data Factory

integration services SSIS Integration Runtime

(SSIS) packages to SQL

azure
Data sources SSIS ETL SQL Database
Managed Instance

Cloud
On-premises
VNET

SQL
SSIS ETL
Data sources
SQL Server
© Copyright Microsoft Corporation. All rights reserved.