search cancel

Migration details of VIP Services Platform migration to Amazon Web Services (AWS) – FAQ

book

Article ID: 150819

calendar_today

Updated On:

Products

VIP Authentication Service VIP Integrations VIP Software Development Kit VIP Enterprise Gateway

Issue/Introduction

 

Resolution

PLEASE READ THIS ENTIRE NOTICE.
 

Symantec is committed to providing a highly-scalable and reliable, cloud-based, strong authentication service. Due to incredible growth and adoption of VIP, we have made changes to the VIP infrastructure to continue delivering quality service by migrating VIP to Amazon Web Services (AWS). Many months of extensive planning and preparation went into this next-generation VIP service. VIP services are no longer served from the former statically-provisioned data centers and now reside in AWS -- an elastic, highly-scalable and resilient public cloud infrastructure. 

Symantec’s goal was to transparently and seamlessly migrate our customers through both phases of this migration. To that end, it is our hope that we accomplished this. 

LATEST UPDATES
> 24 OCT 2018: The VIP AWS MIGRATION IS 100% COMPLETE. All VIP traffic is flowing to end-points in AWS.
> 11 Jun 2018: Phase 1 complete. Phase 2 is underway
> 29 May 2018: Migration times added under What Is Happening
> 05 MAY 2018: Migration progress will be posted to our  VIP Status Page. Visit and subscribe to receive updates.
> 04 APR 2018: Phase 1 date change. Phase 1 will begin on June 4, 2018. Phase 2 is planned for mid-summer 2018. Phase 2 Details and dates will be updated.
> 04 APR 2018: Additional IP address-based connectivity options added to the  Prepare your environment for the Migration of VIP Services Platform to AWS and Test your VIP environment for the Migration of VIP Services Platform to AWS.

The following information was published pre-migration.

WHAT IS HAPPENING?

The VIP AWS migration will occur in two phases. This approach is designed to reduce overhead and operational risks. We do not anticipate any service changes throughout this migration

PHASE 1 Complete

Completed. June 4, 2018 - Beginning at 2 PM PDT (9 PM UTC), all services-auth.vip.symantec.com traffic will be routed through the AWS cloud, then pass through back to the current Symantec VIP data centers (see graphic below). No transactions are occurring on AWS servers during this phase. All VIP Services will continue to be served from the existing VIP data centers.
Completed. June 5, 2018 - Beginning at 2 PM PDT (9 PM UTC), all services.vip.symantec.com traffic will be routed through the AWS cloud, then pass through back to the current Symantec VIP data centers (see graphic below). No transactions are occurring on AWS servers during this phase. All VIP Services will continue to be served from the existing VIP data centers.
Completed - At 2 PM PDT (9 PM UTC), all userservices-auth.vip.symantec.com traffic will be routed through the AWS cloud, then pass through back to the current Symantec VIP data centers (see graphic below). No transactions are occurring on AWS servers during this phase. All VIP Services will continue to be served from the existing VIP data centers.

PHASE 2 Completed ​

All VIP customers and VIP services are being migrated to the VIP AWS platform. The anticipated completion is mid-October 2018.

 

HOW WILL I KNOW WHEN THESE CHANGES ARE HAPPENING?

To receive real-time notifications, subscribe to our VIP Status Page

WILL VIP SERVICES BE INTERRUPTED DURING THIS MIGRATION?

VIP traffic will be seamlessly directed and balanced during both phases of the migration. We do not anticipate any disruption or change in your service before, during or after these changes.  

WHAT IF I LOSE CONNECTIVITY DURING PHASE 2 OF THE MIGRATION?

If connectivity to VIP is lost (see figure 2 above), VIP traffic can temporarily be forced back to the legacy VIP datacenter (see figure 1 above) by bypassing AWS. Contact VIP Technical Support for assistance with these changes. This method involves the PDF attached to this KB article. This document contains the locations of Symantec URLs within your particular VIP integration(s). After connectivity issues are resolved, revert back to the original Symantec URLs. (note: do not use verisign.com URLs)

SHOULD I TEST READINESS FOR THIS MIGRATION?

Yes. Testing must be performed on your VIP Enterprise Gateway(s), custom server application(s), and any other component(s) where VIP Service traffic is served involved can communicate with the VIP Service. See Testing your VIP environment for the Migration of VIP Services Platform to Amazon Web Services for testing procedures.

TELL SYMANTEC HOW YOUR TESTING WENT

When your organization has completed pre-phase 1 testing, let us know the outcome (successful or unsuccessful) at https://migration.vip.symc.io/connect_feedback. If you have any issues and need assistance, we will use this information to contact you. 

HOW CAN I GET MORE INFORMATION?

Symantec is committed to helping our customers achieve success during this transition. If you have further questions or need technical support:


ADDITIONAL FREQUENTLY ASKED QUESTIONS (FAQ)

Where will the service be hosted?

After the migration is complete, the service will be hosted in the United States, in the AWS Oregon [us-west-2] and the Virginia [us-east-1] regions.

What can I do if I cannot whitelist domains?

See AWS Configuration Requirements for the Migration of VIP Services Platform to Amazon Web Services for IP netblocks that you must add to your firewall to allow outbound connectivity to the AWS-hosted platform. Do not remove existing netblocks for legacy VIP data centers.

Will the service capabilities change as a result of this migration?

There will be no functional changes in VIP. All services will continue to function seamlessly throughout this migration.

Are there changes to my Service Level Agreement?

No. Your existing Service Level Agreement applies to the new environment.

How will I know when my service was migrated?

This migration will be transparent to you. We will alert you when your service has moved.

Can I opt out of the migration?

No. Symantec will completely exit its legacy data centers and terminate those operations by calendar Q4 of 2018.

Will the routed traffic through the AWS-hosted platform increase latency?

There will be no observable change in speed. Symantec testing has shown an average increase in latency after Phase 1 with the new route to be ~20ms.

I use VIP Pilot or Partner Lab environments. Will these be migrated to AWS as well?

Both VIP Pilot and VIP Partner Lab environments will function until October 2018.

  • VIP Pilot will be retired in October 2018. If you are actively using Pilot environment for testing, immediately contact your Symantec representative to discuss acquiring a VIP test account.
  • Partner Lab will be migrated to AWS. Users will be notified of this activity.

Attachments