microsoft exchange 2013 deployment and coexistence

http://technet.microsoft.com/en-us/library/cc731125(v=WS.10).aspx

http://technet.microsoft.com/en-us/library/cc731125(v=WS.10).aspx

AuthN, Proxy, Re-direct

Protocols, API, Biz-logic

Assistants, Store, CI

Exchange 2010Architecture

AuthN, Proxy, Re-direct

Store, CI

Protocols, Assistants, API, Biz-logic

Exchange 2013Architecture

Client Access

Mailbox

Client AccessHub Transport,

Unified Messaging

Mailbox

HardwareLoad Balancer

L4 LBL7 LB

SP3

E2010 CAS

E2010 HUB

E2010 MBX

Clients

Internet-facing site – upgrade first

autodiscover.contoso.commail.contoso.com

Intranet site

Exchange 2010 Servers

SP3

1. PrepareInstall Exchange 2010 SP3 across the ORGPrepare AD with Exchange 2013 CU1 schemaValidate existing Client Access using Remote Connectivity Analyzer and test connectivity cmdlets

4. Switch primary namespace to Exchange 2013 CASExchange 2013 fields all traffic, including traffic from Exchange 2010 usersValidate using Remote Connectivity Analyzer

5. Move MailboxesBuild out DAGMove Exchange 2010 users to Exchange 2013 MBX

6. Repeat for additional sites

2. Deploy Exchange 2013 CU1 serversInstall both Exchange 2013 MBX and CAS roles

SP3SP3

E2013 CAS

E2013MBX

3. Obtain and deploy certificatesObtain and deploy certificates on Exchange 2013 Client Access Servers

1 2 4

3

5 6

RU10

E2007 SP3 CAS

E2007 SP3 HUB

E2007 SP3 MBX

Clients



Intranet site

Exchange 2007 Servers

RU10

1. PrepareInstall Exchange 2007 SP3 + RU10 across the ORGPrepare AD with Exchange 2013 CU1 schema

5. Switch primary namespace to Exchange 2013 CASValidate using Remote Connectivity Analyzer

6. Move mailboxesBuild out DAG Move Exchange 2007 users to Exchange 2013 MBX


2. Deploy Exchange 2013 CU1 serversInstall both Exchange 2013 MBX and CAS servers

RU10

RU10

E2013 CAS

E2013MBX

3. Create legacy namespaceCreate DNS record to point to legacy Exchange 2007 CAS

4. Obtain and Deploy CertificatesObtain and deploy certificates on Exchange 2013 CAS servers configured with legacy namespace, Exchange 2013 namespace, and autodiscover namespaceDeploy certificates on Exchange 2007 CAS

legacy.contoso.com3

1 2 5

4

6 7

SP/RU

E2010 or 2007CAS

E2010 or 2007 HUB

E2010 or 2007 MBX

Clients

Internet facing site – Upgrade first


Intranet site

Exchange 2010 or 2007 Servers

SP/RU

1. PrepareInstall Exchange SP and/or updates across the orgPrepare AD with Exchange 2013 CU1 schema and validate

5. Switch primary namespace to Exchange 2013 CAS

6. Move mailboxes


3. Create legacy namespace

4. Obtain and deploy certificates

12. Deploy Exchange 2013 CU1 servers

Install Exchange 2007 SP3 + RU10 using same steps as previous Exchange 2007 roll-ups

Prepare Active Directory with Exchange 2013 CU1 schema

Validate existing client access using Remote Connectivity Analyzer and test connectivity cmdletshttp://www.exrca.com

Prepare 1

SP/RU

E2010 or 2007CAS

E2010 or 2007 HUB

E2010 or 2007 MBX

Clients



Intranet site


SP/RU

1. PrepareInstall Exchange SP and/or updates across the orgPrepare AD with Exchange 2013 CU1 schema


6. Move mailboxes


2. Deploy Exchange 2013 serversInstall both E2013 MBX and CAS servers

E2013 CAS

E2013MBX



22. Deploy Exchange 2013 CU1 servers

Install both Exchange 2013 MBX and CAS servers

MBX performs PowerShell commandsCAS is proxy only

GUI or command lineIn-place upgrades not supportedUpdated to reflect Exchange 2013 roles

New required parameter for license terms acceptance

Install

− Setup.exe /mode:install/roles:clientaccess

− Setup.exe /mode:install/roles:mailbox

− Setup.exe /mode:install/roles:ManagementTools

Other required parameter- /IAcceptExchangeServerLicenseTerms

12

E2010 or 2007CAS

E2010 or 2007 HUB

E2010 or 2007 MBX

Clients



Intranet site




6. Move mailboxes



E2013 CAS

E2013MBX


legacy.contoso.com3


SP/RUSP/RU

Used to access Exchange 2007 during coexistence

Legacy.contoso.com

http://www.exrca.com

Create Legacy Namespace 13

E2010 or 2007CAS

E2010 or 2007 HUB

E2010 or 2007 MBX

Clients



Intranet site




6. Move mailboxes



E2013 CAS

E2013MBX

4. Obtain and deploy certificatesObtain and deploy certificates on Exchange 2013 CAS configured with legacy namespace, Exchange 2013 namespace, and Autodiscover namespaceDeploy certificates on Exchange 2007 CAS

legacy.contoso.com

4


SP/RUSP/RU

First notification shown 30 days prior to expirationSubsequent notifications provided daily

14

Minimize the number of certificates

Minimize number of host namesUse split DNS for Exchange host namesmail.contoso.com for Exchange connectivity on intranet and Internetmail.contoso.com has different IP addresses in intranet/Internet DNS

Don’t list machine host names in certificate host name listUse load-balanced (LB) arrays for intranet and Internet access to servers

Use “Subject Alternative Name” (SAN) certificate

Certificates 14

E2010 or 2007CAS

E2010 or 2007 HUB

E2010 or 2007 MBX

Clients



Intranet site




6. Move mailboxes



E2013 CAS

E2013MBX


legacy.contoso.com


SP/RUSP/RU

5

Exchange 2010 Coexistence

Layer 4 LB

E2013 CAS

IIS

HTTP Proxy

E2013 MBX

Protocol Head

DB

E2010 CAS

Protocol Head

E2010 MBX

Store

DB

Site Boundary

E2010 CAS

Protocol Head

E2010 MBX

Store

DB

RPC RPC

Cross-Site Proxy Request

Layer 7 LB

Cross-SiteRedirect Request

OWAeurope.mail.contoso.commail.contoso.com

Exchange 2007 Coexistence

Layer 4 LB

E2013 CAS

IIS

HTTP Proxy

E2013 MBX

Protocol Head

DB

E2007 CAS

Protocol Head

E2007 MBX

Store

DB

Site Boundary

E2007 CAS

Protocol Head

E2007MBX

Store

DB

RPC RPC

Layer 7 LB

Cross-SiteRedirect Request

OWA

Layer 7 LBLegacy.contoso.com mail.contoso.com europe.mail.contoso.com

Cross-Site Proxy Request

Protocol Exchange 2007 user accessing Exchange 2010 namespace

Exchange 2007 user accessing Exchange 2013 namespace

Exchange 2010 user accessing Exchange 2013 namespace

Requires Legacy namespace Legacy namespace No additional namespaces

OWA • Same AD site: silent or SSO FBA redirect• Externally facing AD site: manual or silent/SSO

Cross-site redirect• Internally facing AD site: proxy

Non-silent redirect (not SSO) to CAS 2007 externally facing URL

• Proxy to CAS 2010• Cross-site silent redirect (not SSO), which may

redirect to CAS 2010 or CAS 2013

EAS • EAS v12.1+ : Autodiscover & redirect • Older EAS devices: proxy

Proxy to MBX 2013 Proxy to CAS 2010

Outlook Anywhere

Direct CAS 2010 support Proxy to CAS 2007 Proxy to CAS 2010

Autodiscover Exchange 2010 answers Autodiscover query for 2007 User

Exchange 2013 answers Autodiscover query for 2007 User

Proxy to CAS 2010

EWS Uses Autodiscover to find CAS 2007 EWS External URL

Uses Autodiscover to find CAS 2007 EWS External URL

Proxy to CAS 2010

POP/IMAP Proxy Proxy to CAS 2007 Proxy to CAS 2010

OAB Direct CAS 2010 support Proxy to CAS 2007 Proxy to CAS 2010

RPS n/a n/a Proxy to CAS 2010

ECP n/a n/a • Proxy to CAS 2010• Cross-site redirect, which may redirect to CAS

2010 or CAS 2013

E2010 or 2007CAS

E2010 or 2007 HUB

E2010 or 2007 MBX

Clients



Intranet site




6. Move mailboxesBuild out DAG Move users to Exchange 2013 MBX



E2013 CAS

E2013MBX


legacy.contoso.com


SP/RUSP/RU

6

• Hypervisors

• Exchange roles

• Storage

• Host-based clustering

• Migration

• Jetstress in guests

• Dynamic memory & memory overcommit

• Hypervisor snapshots

• Differencing/delta disks

• Apps on the root

• Significant processor oversubscription

0

20

40

60

80

100

120

0

500

1000

1500

2000

2500

3000

RPC Operations/sec% Processor TimeRPC RequestsRPC Averaged LatencyLinear (RPC Operations/sec)

0

1E+09

2E+09

3E+09

4E+09

5E+09

6E+09

0

10

20

30

40

50

60

RPC Averaged LatencyAvailable Bytes

0

1E+09

2E+09

3E+09

4E+09

5E+09

6E+09

0

5000

10000

15000

20000

25000

30000

35000

40000

45000

Transition PagesRePurposed/secPages Output/sec

Working Set (_Total)

Working Set (store)

Available Bytes

microsoft exchange 2013 deployment and coexistence

Technology