Skip to main content
Cloud DevOps Solutions
Get a quote Talk to an engineer

Cloud Migration

Server Migration to AWS and Azure with MGN and Azure Migrate

We rehost servers using AWS Application Migration Service (MGN) or Azure Migrate: install a replication agent or appliance, let block level replication run, launch test instances, then cut over in planned waves. AWS Server Migration Service has been retired in favour of MGN.

Key takeaways

  • Replication runs for days or weeks before cutover, so the final switch is short and rehearsed.
  • Test launches prove each server boots and works in the cloud before anyone depends on it.
  • Right-sizing and OS clean-up happen after the move, not by changing the server during it.
  • Cutover is a procedure with named steps, validation checks and a rollback trigger.
  • The old servers are retired deliberately, after a parallel run, to stop paying for both.

What rehost really involves

Rehosting, often called lift and shift, is the fastest route off a data centre and the least glamorous. It is also where many programmes spend most of their effort, because it covers the bulk of the estate. The idea is simple: copy the server, start it in the cloud, point users at it. The practice depends on doing that repeatably for dozens or hundreds of machines without surprises.

Server migration is stage three of the cloud migration service. It runs inside the waves defined in the roadmap and lands on the foundation built beforehand.

What good looks like

  • Replication is healthy and monitored long before cutover day.
  • Every server has been test-launched at least once, with evidence that its application works.
  • Post-launch changes (agents, time sync, DNS, licensing) are automated, not hand edited.
  • The cutover runbook is the same for every server of a type, so the team gets faster with practice.
  • The source is retired on a schedule that stops double-running costs.

How MGN works

With AWS Application Migration Service, a replication agent on the source reads disk blocks and sends them to lightweight staging instances in your AWS account, writing to low cost volumes. When you launch a test or cutover instance, the service converts the replicated disks into a bootable instance using launch settings you define: instance type, subnet, security groups, tags.

Launch templates keep those settings consistent. Installing the agent is a short operation, and the key inputs are the region, credentials created for the purpose and the disks to replicate. For Linux sources:

# Download and run the replication agent installer (values from your account)
wget -O ./aws-replication-installer-init \
  https://aws-application-migration-service-<region>.s3.<region>.amazonaws.com/latest/linux/aws-replication-installer-init
chmod +x aws-replication-installer-init
sudo ./aws-replication-installer-init --region <region> --no-prompt
# Provide access key ID and secret for a dedicated, minimally scoped
# agent installation user when prompted or via the documented flags.

Use the current installer path and options from the AWS documentation for your region, and give the installation user only the permissions the service requires. Credentials are issued for the migration and revoked afterwards.

How Azure Migrate works

For VMware estates, Azure Migrate uses a lightweight appliance that discovers machines, then replicates VMs to Azure managed disks. Hyper-V and physical servers use their own replication arrangements. As with MGN, you perform test migrations into an isolated virtual network, check results, then run the migration, which performs a final sync and creates the Azure VM. Azure Migrate also supports assessment, with sizing recommendations based on performance history, which ties into the readiness assessment.

Test launches are the real work

A test launch catches the problems you want to find on a quiet Tuesday rather than on a cutover night. We check that the operating system boots, that network interfaces and drivers behave, that services start in the right order, that licences activate and that the application can reach its dependencies. A common find is software bound to a MAC address or old IP, or an application that hard-codes the address of another server. These show up as test failures and become fixes in the runbook.

Windows servers need attention to licensing and activation models. Linux servers need a look at fstab entries, network configuration files and any bootloader customisation. Anything tied to hypervisor tools should be reviewed.

Standardise after the move, not during

It is tempting to patch, resize and clean each server during the move. Resist it. Changing the server while moving it makes failures harder to diagnose, because you cannot tell whether the move or the change broke it. We move first, then standardise using configuration management such as Ansible: install the cloud monitoring agent, apply the baseline, adjust instance size from real usage, and move disks to appropriate volume types. The follow-up review is part of cost optimisation.

Decisions and trade-offs

Rehost or replatform. Rehosting is quicker and lower risk per server. Replatforming, for example moving a file server to a managed file service, cuts operational work for the long term. Pick per workload using the 6Rs, and do not let one approach consume the whole estate.

Agent or agentless. Agentless approaches are lighter to deploy but may have longer cutover sync and less control. Agent-based replication handles more sources and gives block-level continuity. For a large VMware estate, agentless discovery plus agent-based migration for sensitive servers is common.

When not to rehost. Servers at end of life, with no owner, or performing a function a SaaS now covers should be retired or repurchased instead.

A worked example: one wave, step by step

Take a wave of ten application servers. In the week before, we confirm replication is healthy on all ten and run a test launch for each in the isolated network, recording what needed fixing. On cutover day the order is: announce the start, stop the application services on the source, wait for the final sync to show no lag, launch the cutover instances from the tested templates, run the validation checks, then switch traffic according to the plan. If a check fails and cannot be fixed within the agreed time, the source is started again and the wave is rescheduled. Afterwards the source servers are kept powered off, not deleted, until the parallel run ends.

Common failure modes

  • Replication bandwidth underestimated, so initial sync takes weeks. Check against the network link early.
  • Replication lag at cutover on busy servers.
  • Firewall rules and host files that point at old addresses.
  • Cutover night as first rehearsal, which is the single most avoidable cause of rollbacks.
  • Source servers left running for months, doubling cost.

Delivery and handover

We provide per-wave runbooks, the launch templates in code, the test results and a decommissioning checklist. Your team is shadowed during early waves and leads later ones, so the capability stays with you.

How to tell it is working

Test launches succeed on the first or second attempt, cutover windows match rehearsal, and rollbacks, when triggered, are clean. Server counts on the source fall on schedule. To plan a server migration with us, contact us.

References

How we deliver it

  1. 01

    Prepare the target

    Landing zone, network, security groups and replication settings are in place before any server is touched.

  2. 02

    Start replication

    Agents or an appliance replicate disks continuously to staging storage in the target account.

  3. 03

    Launch test instances

    Each server is launched in an isolated test network and checked for boot, services and application behaviour.

  4. 04

    Fix and standardise

    Drivers, agents, licensing, monitoring and hostnames are adjusted using launch settings and post-launch automation.

  5. 05

    Cut over in waves

    Final sync, shut down the source, launch the cutover instance, validate, then switch traffic per the plan.

  6. 06

    Decommission safely

    After the parallel run, replication is stopped, resources cleaned up and the source retired with sign-off.

Tools and technologies

AWS Application Migration ServiceAzure MigrateAzure Site RecoveryAWS Systems ManagerAWS Launch TemplatesVMware vSphereHyper-VTerraformAnsiblePowerShellcloud-init

Frequently asked questions

What replaced AWS Server Migration Service?
AWS Application Migration Service, known as MGN, is the current AWS service for lift and shift server migration. It replicates source disks at block level and launches converted instances in AWS. Older SMS and CloudEndure Migration workflows have been superseded, so we plan new projects on MGN.
How much downtime does a server cutover need?
Typically a short window while the source is stopped, a final sync completes and the cutover instance is launched and checked. The length depends on change rate and application start-up time. Rehearsing test launches gives a realistic estimate, and stateless tiers can often use a phased traffic shift with no visible outage.
Does rehost carry over problems from the old server?
Yes, rehost moves the server as it is, including unpatched software and oversized disks. That is by design, since it separates the move from the clean-up. We plan right-sizing and hardening straight after cutover so you do not keep paying for the old inefficiencies.
Can we migrate physical servers or other clouds?
MGN supports physical servers and instances from other clouds via its agent, subject to OS and kernel support. Azure Migrate supports VMware, Hyper-V and physical servers. Support matrices change, so we check the exact OS versions during assessment.
When should we replatform or refactor instead of rehost?
When the server's value is in something you can replace with a managed service, such as a database or file share, or when the application has scaling or release problems that rehosting would simply carry over. Otherwise rehost first and modernise once the estate is stable.

Talk to an engineer about aws application migration service

Book a free 30-minute call. We review your current setup and tell you honestly whether and how we can help.

Written by Saddique Khan, DevOps / SRE / Cloud Consultant Engineer. Last updated 2026-10-08.