Updated on 2023-05-29 GMT+08:00

Solution Design

Deployment Plan

Use HUAWEI CLOUD services for the deployment. Specifically, use ECS or BMS for server computing resources, and EVS and SFS for storage.

Table 1 Deployment plan

Migrate Object

Source

Target

Application server

Physical server

ECS

Database server

Physical server

ECS or BMS

Storage

Physical hard disk

EVS

Figure 1 shows a typical SAP system deployment architecture on HUAWEI CLOUD. The architecture of a new deployment or that used in a migration to HUAWEI CLOUD is similar to this one.

Figure 1 SAP deployment architecture

For more features and details, see SAP Deployment Guide.

You can also visit the SAP official website to learn more about the SAP products related to HUAWEI CLOUD. Table 2 lists the SAP notes.

Table 2 HUAWEI CLOUD-related SAP notes

SAP Note #

Title

2582296

SAP Applications on Huawei Cloud: Supported Products and Huawei Cloud VM types

2582305

SAP on Huawei Cloud: Support prerequisites

2570214

Linux on Huawei Cloud: Adaption of your SAP License

2570198

SAP on Linux with Huawei Cloud: Enhanced Monitoring

2644322

SAP Adaptive Server Enterprise (ASE) 16.0 Certification Report for Huawei Cloud

Determine the number and specifications of servers deployed on HUAWEI CLOUD based on the source system status, service requirements, and the preceding information. Then, design the HUAWEI CLOUD deployment plan. The deployment plan needs to contain the detailed information about cloud product selection and networking plan to guide subsequent resource provisioning.

Networking Plan

After the migration, a VPC is used on the cloud. For details about subnet planning, see the VPC User Guide. HUAWEI CLOUD is connected with the on-premises IDC using EIP, VPN, or Direct Connect.

HUAWEI CLOUD VPC is an isolated and private virtual network environment that users apply for on the HUAWEI CLOUD. You can configure IP address segments, subnets, and security groups, assign EIPs, and allocate bandwidths in a VPC. Figure 2 shows the network architecture.
Figure 2 Network architecture

VPC provides multiple connections between the local system of a user and the SAP system running on HUAWEI CLOUD. You can select a connection type as required.

  • Direct Internet Connection

    You can configure a public EIP address on the cloud server to connect it to the public network through the EIP service. The SAP technical support personnel can access the system deployed on HUAWEI CLOUD using the public IP address.

  • Direct Connect

    Direct Connect helps you establish a dedicated network that connects your local data center to the public cloud. Direct Connect sets up dedicated connections between the Direct Connect gateway and a VPC on the public cloud. With Direct Connect, you can establish network circuits between the cloud and your data center, office, or collocation environment. Direct Connect can effectively reduce network latency and improve network experience.

  • VPN

    VPN establishes a secure, encrypted communication tunnel between the VPN gateway of the VPC on HUAWEI CLOUD and the VPN gateway of your local data center, allowing you to directly use resources in the VPC through the VPN.

    By default, cloud servers in a VPC cannot communicate with your data center or private network. To enable communication between them, you can create a VPN.

Security Design

Enterprises store core data in the SAP system. HUAWEI CLOUD ensures the security of the SAP system based on the cloud platform security and network configurations.

You are recommended to divide the cloud-based system (production environment and development and test environment) into zones of different security levels, including the management, application, SAP DB, and demilitarized zones (DMZ). The zones are isolated from each other using VPCs or subnets.

Figure 3 Production environment security solution

Figure 4 Development and test environment security solution

For details, see SAP Security White Paper.

Service Account System Design

After the system is deployed on the cloud, HUAWEI CLOUD provides enterprise management services for enterprise group uses to manage the employees, finance, and materials in multi-level organizations and multi-project mode and to standardize enterprise operation requirements on HUAWEI CLOUD. Figure 5 shows the HUAWEI CLOUD enterprise accounts. For details, see Enterprise Management.

Figure 5 Enterprise accounts

Migration Solution

Table 3 lists the recommended migration solution. For details about the migration methods, see Migration Solution Details.

Table 3 Migration Solution

Migrate Object

Migration Plan

Description

Application server

SMS or SMT
NOTE:

If the source server cannot access SMS, use SMT.

SMS supports online and incremental migration. You are recommended to migrate SAP application servers online in incremental mode for multiple times.

Data transmission time = Actual data volume/Actual network bandwidth

Table 4 lists the estimated time for transmitting 1 TB data. Estimate the time required for transmitting data based on the actual data volume. If the data cannot be transmitted within the estimated time, increase the network bandwidth.

Database server

  • The non-production system database can be migrated offline using SMS.
  • The production system database is migrated using the native database tool, such as the database backup and restore tool.

If you use SMS to migrate the database, SMS performs online clone of the OS. All the data on the OS, such as the application software and system configurations, is replicated to the target system. Generally, the application software can be started at the target system. However, if the database is migrated when it is running, the database may fail to start after the migration. Therefore, you need to migrate the database offline when you use SMS.

Table 4 Theoretical time for transmitting 1 TB data

Network Bandwidth

2 Mbit/s

10 Mbit/s

50 Mbit/s

100 Mbit/s

Theoretical time (80% network utilization rate)

NOTE:

Transmission time (days) = [Total capacity (KB)]/[Bandwidth (Mbit/s) x 125 x Network utilization rate x 60 (seconds) x 60 (minutes) x 24 (hours)]

106 days

13 days

60 hours

30 hours

Service Switchover Plan

The owner of the service switchover plan is the migration implementor. This section provides an example of the service switchover plan.

Table 5 Switchover plan example

Migration Plan

Switchover Plan

Impact

Use SMS to migrate application servers online, and use SMT to migrate database servers offline.

  1. After using SMS to migrate the application servers to HUAWEI CLOUD, use incremental replication to synchronize the source end server changes to HUAWEI CLOUD online.
  2. After stopping the database, use SMS to migrate the database servers to HUAWEI CLOUD.

The database servers are migrated offline, so the interruption will be long. This plan applies to the non-production system.

Interruption duration = Data transmission time for the database server + Commissioning time after the migration

Deploy application servers on the cloud, and use the backup and restore plan for database servers.

  1. Commission the application servers after the deployment.
  2. Restore the database servers using full backup.
  3. Stop the database at the source end. Upload the incremental data and necessary log files to the database on the cloud. Restore the database using the incremental data.

Stop the servers at the source end before the incremental backup of the last time. Compared with the offline migration plan, this plan causes shorter interruption, so it applies to the production system.

Interruption duration = Time for incremental backup + Time for transmitting incremental data + Time for restoring the incremental data