"Lift and Shift"? is the worst...
Photo by @martijnbaudoin

"Lift and Shift" is the worst...

Lift and shift cloud migrations are the worst way to deal with legacy technology.

You'd think that by this stage in cloud computing's maturity, all of those platform migrations would be done and dusted. That all the old legacy systems would be consigned to the great server room in the sky. Surely no-one is still running things on-prem, are they?

"Just move everything to the cloud now. We can stop paying all the hosting costs/sell the building/re-purpose the space and downsize the team. Then we can worry about fixing things after we've moved".

I've heard this a lot over the past decade, and I understand the rationale. But in the majority of cases, these headlines are just that - headlines - with limited total cost analysis or operational risk factored in. Whether your organisation has 100 or 10,000 employees, it's likely that you're heavily reliant on some line of business applications. And it's also therefore likely that if you're planning a cloud migration, or have already migrated via lift and shift, you'll need to do something about your architecture.

Those client/server applications you’ve got running on-prem are probably reliant on a whole host of unknown platform dependencies. When you go about moving them as-is to a cloud environment, there’s a good chance you’re not taking all of the old dependencies with you in the way they’re wired together - and in many cases physically - today. But what you are taking are the applications' original limitations, security vulnerabilities, and performance issues.

So what happens when you move? Will it still work? Will it be cheaper to run?

Faced with this dilemma, some teams try and move the whole lot in one go. Surely if everything moves together, it’ll still just work, won't it?

Well, not necessarily - a lot depends on the specific configuration, be it network, storage or even basic things like machine names. Because all documentation has either vanished without trace, has never been written or is so out of date as to be useless, you’ll just never know til you push the?button(s), by which time it’s too late. And when was the last time anyone tested the legacy backup/restore capability?

You could of course phase things, which seems eminently more sensible. Small chunks, migrated over time, with rigorous testing as you go.

But why are you moving anyway? That’ll be because the stack is expensive and outdated, sitting there on 8 year old servers that are no longer supported in a rack down in the basement. By moving it, surely you’re just protecting the business and saving a load of cash in the process in the quickest and easiest way possible?

Unless the total cost of cloud and the trappings that go with it are less than the cost of power and support of keeping it on-prem, or provide tangible strategic benefit (e.g. scale), you might be in for a surprise post-move. That's not taking the cost of change/migration into account either...which is likely to be more than you anticipated too (because inevitably, there's more to the migration than just next > next > finish, and everything takes longer than you think).

In addition, and despite the fact that cloud as we know it has been around for what feels like an age now, some skills are still hard to come by or are at a premium, as many technologists have had to spend more time doing rather than learning - so expect to pay more for new hires and/or invest in training for your team.

Surely though it’ll be easier to unpick the architecture once it’s running on a modern cloud-hosted platform? Well maybe - that’s if it runs at all, virtualisation or no virtualisation. Some legacy code/systems just don't run well on some cloud platforms and it's not beyond the realms of possibility that re-work or re-configuration will be required, especially when "stretching" the front-end, back-end and everything in between through multiple layers of complexity.

So am I against cloud migration? On the contrary, I'm an advocate where there is a solid business case to justify doing so. Furthermore, in some scenarios there’s just no other option but lift and shift. I get it.

But if you do have the opportunity to go through a best-practice assessment and treatment process (like the 6 R’s - rehost/refactor/revise/rebuild/replace/retain), then I'd highly recommend doing so to optimise the financial commitment for the organisation, to protect the uptime of your environment and ultimately, to protect your own sanity during what will potentially be a stressful and drawn-out process.

Igor Barshteyn

?? Protecting Data and Mitigating Information Security and Privacy Risks | All My Words Are Human-Generated | The views expressed represent my personal opinion and don't represent the position of EY | Don't Sell Me Stuff

2 年

Whenever I hear "Lift and Shift" I hear the same phrase but without the F in "Shift"... It's a great way to: a) Avoid resolving technical debt. b) Drag your security dumpster fire of an infrastructure into the cloud, compromising your security there. c) Avoid using cloud-native design principles while still being able to say "See, we are migrating to the cloud as part of our Digital Transformation!" LOL.

回复
John Farrer MAPM FITOL

Group IT - Business Partner

2 年

Sadly Gareth, rather than take time to assess the benefits and costs, many still assume that because it’s “Cloud” it must br the best. They still believe the slick marketing that some of the larger providers push out, without truly assessing if it’s right for their business. Undoubtedly many benefits to be had, but just not for all businesses all at once.

Owen S.

Explaining UK Data Protection Act 2018 obligations (& implications) to Law Enforcement Competent Authorities & partners

2 年

An excellent, pithy and wholly accurate reflection of why anyone who extolls 'lift and shift' as a model for organisations with large or complex legacy challenges should be shown the door. It is the mantra of most management consultancies to present exactly this approach however, and its telling (and concerning) how many customers take that advice and doggedly try to apply it. In most cases you're just moving a difficult problem that's directly under your physical control on to a platform that you don't have full administrative access to, can't physically access, and upon which your complex legacy workloads generally won't work (or at least won't work as you expect them to). At best you'll have moved your existing legacy systems on to a more expensive (but arguably more modern) platform, whilst compounding your existing technical debt challenges by adding greater technical complexity and incurring huge nugatory migration costs. You might also introduce new legal or regulatory challenges depending on the destination Cloud platform you choose to adopt. Unwise - but sadly its increasingly common.

Adam Gwinnett

Principled technologist focused on secure services to give confidence in achieving business goals | Public Sector / Regulated Industry

2 年

Really solid. If an organisation can't incentivise/prioritise doing refactoring as part of a cloud migration, what is the likelihood they will do this after? If they were going to do that the app probably wouldn't have been "legacy" before you moved it. Also if running it on cloud actually increases the TCO (we've both seen that before...) then where is the money to re-engineer coming from on an already over-committed budget?

要查看或添加评论,请登录

Gareth Humphreys的更多文章

  • What's a CISO anyway (nowadays)?

    What's a CISO anyway (nowadays)?

    It's widely accepted that Steve Katz became the first CISO, way back in 1995. It's well-told story and there have been…

  • "Robotic" Process Automation?

    "Robotic" Process Automation?

    A vision of the future we were told..

    1 条评论
  • Is it *really* Digital Transformation?

    Is it *really* Digital Transformation?

    Ah yes. That ubiquitous term that's been floating around boardrooms and included in business strategies for years now;…

    3 条评论
  • I think, therefore IAM.

    I think, therefore IAM.

    My first introduction to real identity management was around 25 years ago. A public sector customer that the company I…

    2 条评论
  • The Death of Traditional Enterprise Architecture: Why It's Time for Change

    The Death of Traditional Enterprise Architecture: Why It's Time for Change

    Like a lot of people who started their technology career in the mid-90s, I ended up falling into an Architecture role…

    29 条评论
  • What Q4 '24 Shows Us About the UK Job Market

    What Q4 '24 Shows Us About the UK Job Market

    If you've been paying attention to the UK job market lately, you might have noticed something interesting happening…

  • CloudOps, SRE and Uptime

    CloudOps, SRE and Uptime

    No-one likes paying for insurance because no-one ever thinks it’ll happen to them. We humans definitely have an…

  • "Why is it so hard to recruit in tech at the moment? Where is everyone?"

    "Why is it so hard to recruit in tech at the moment? Where is everyone?"

    Not only have I said this myself recently, but I'm hearing it a lot too. But why? The common - but in my opinion…

    2 条评论

社区洞察

其他会员也浏览了