Data migration
Migration between Alibaba Cloud Object Storage Service (OSS) buckets involves copying data from one bucket to another. This process is ideal for use cases like data backup, data migration, and disaster recovery, enabling efficient transfer and management of data between different buckets. This topic describes the considerations, limitations, and procedure for data migration.
Considerations
Consider the following when using the online migration service:
-
The online migration service accesses source data using the standard public APIs of the source storage service provider. The migration behavior depends on the provider's service implementation.
-
Online migration consumes resources at both the source and the destination, potentially impacting your business operations. If your services are critical, evaluate the potential impact and configure a speed limit for the migration task, or run the task during off-peak hours.
-
The online migration service checks files at both the source and destination before a migration begins. However, if a file at the source has the same name as a file at the destination and the migration task is configured to overwrite existing files, the service overwrites the destination file. If the files contain different data, rename one of the files or back up the destination file before starting the migration.
-
The online migration service preserves the last modified time of source files. If a lifecycle rule is configured for the destination bucket, a migrated file whose last modified time matches the rule's conditions may be deleted or transitioned to the specified archive storage class.
Limitations
-
If static website hosting is enabled for the source bucket, the migration service also detects directory paths as objects. For example, if you upload the file myapp/resource/1.jpg, the migration service detects three objects: myapp/, myapp/resource/, and myapp/resource/1.jpg. Migration for the directory objects myapp/ and myapp/resource/ will fail, but the file myapp/resource/1.jpg will migrate successfully.
-
If the source bucket contains symbolic links, the migration service transfers the symbolic links themselves, not the objects they point to. For more information about symbolic links, see symbolic links.
-
You can migrate data from only one bucket per migration task. Migrating data from an entire account at once is not supported.
-
Data migration from Financial Cloud and Government Cloud is not supported.
-
When you migrate data between Alibaba Cloud OSS buckets, object properties are handled as follows:
-
The following properties are migrated: x-oss-meta-*, LastModifyTime, Content-Type, Cache-Control, Content-Encoding, Content-Disposition, Content-Language, and Expires.
-
The following properties are not migrated (including but not limited to): storage class, ACL, server-side encryption, tagging, and user-defined headers such as x-oss-persistent-header.
NoteThe list of unsupported properties is not exhaustive. The migration behavior of unlisted properties is not guaranteed. Verify your object properties after the migration is complete.
-
Step 1: Select a region
Region selection
Egress traffic fees for migrating data between two OSS buckets depend on the service region you select in the console before creating a task.
1. If the data source's region is the same as the selected service region, the source OSS does not incur internet egress fees.
For example, if both the source and destination are OSS buckets in China (Beijing) and you select China (Beijing) as the service region, the source OSS incurs no internet egress fees during migration.

2. If the data source's region is different from the selected service region, the source OSS incurs internet egress fees.
For example, if the source is an OSS bucket in China (Beijing) and the destination is in Singapore, and you select Singapore as the service region, the source OSS incurs internet egress fees during migration.

To minimize network latency, we recommend selecting a service region that matches your data source's region. If that region is unavailable, select one geographically close to the data source to ensure optimal migration performance.
Procedure
-
Log on to the Data Transport console using the RAM user that you created.
NoteFor a cross-account migration, you can log on using a RAM user from either the source or destination Alibaba Cloud account.
-
The region you select in the upper-left corner of the top navigation bar is the migration service deployment region. Therefore, select the region where your data source is located or the one closest to it.
The region you select at the top of the console is the migration service deployment region. Available regions in the Chinese mainland include China (Beijing), China (Shanghai), China (Hangzhou), China (Shenzhen), and China (Ulanqab). Other available regions include China (Hong Kong), Singapore, Germany (Frankfurt), and US (Virginia).
Important-
Data endpoints and migration tasks are region-specific. Choose your region carefully.
-
We recommend selecting your source data's region. If this region is not available, select the closest available region.
-
For cross-border migrations, we recommend enabling transfer acceleration to improve migration speed. Buckets with transfer acceleration enabled incur transfer acceleration fees. For more information about transfer acceleration, see Accelerate access to OSS.
-
Step 2: Create a source address
-
In the navigation pane on the left, choose Data Online Migration > Address Management, and then click Create Address.
-
In the Create Address panel, configure the following parameters, and then click OK.
Parameter
Required
Description
Name
Yes
-
The name must be 3 to 63 characters in length.
-
The name can contain lowercase letters, digits, hyphens (-), and underscores (_). The name is case-sensitive.
-
The name cannot start with a hyphen (-) or an underscore (_).
Type
Yes
Select OSS.
Custom domain name
No
You can specify a custom domain name.
Region
Yes
Select the region where the source bucket is located, for example, China (Hangzhou).
RAM role
Yes
-
If the source bucket is in your current account:
-
If the source bucket belongs to a different account:
Bucket
Yes
Enter the name of the source bucket in the current account.
Prefix
No
You can specify a prefix to migrate a subset of your data. The prefix cannot start with a forward slash (/) but must end with one, for example,
data/to/oss/.-
If you specify a prefix: For example, if the source prefix is
example/src/, an object with the key example/src/example.jpg is selected for migration. If you set the destination prefix toexample/dest/, the object's key after migration becomesexample/dest/example.jpg. -
If you do not specify a prefix: For example, if you do not specify a source prefix and the object key is
srcbucket/example.jpg, and you set the destination prefix todestbucket/, the object's key after migration becomesdestbucket/srcbucket/example.jpg.
Tunnel
No
Select the name of the channel to use.
Important-
This parameter is required only when migrating data over an Express Connect or VPN connection, or when migrating data from a self-managed storage system.
-
You must associate an agent if the destination is a local file system or if the migration uses a dedicated connection, for example, to a financial cloud or Apsara Stack environment.
Agent
No
Select the name of the agent to use.
Important-
This parameter is required only when migrating data over an Express Connect or VPN connection, or when migrating data from a self-managed storage system.
-
You can select a maximum of 200 agents for a specified channel.
-
Step 3: Create a destination address
-
In the navigation pane on the left, choose Data Online Migration > Address Management, and then click Create Address.
-
In the Create Address panel, configure the following parameters, and click OK.
-
The name must be 3 to 63 characters in length.
-
The name can contain lowercase letters, digits, hyphens (-), and underscores (_). The name is case-sensitive.
-
The name cannot start with a hyphen (-) or an underscore (_).
-
If the destination bucket is in your current Alibaba Cloud account:
-
If the destination bucket belongs to a different Alibaba Cloud account:
-
If you specify a prefix: For example, if an object named example.jpg is in the source path
example/src/, and you set the destination prefix toexample/dest/, the object's full path in the destination becomesexample/dest/example.jpg. -
If this parameter is left blank, data is migrated to the root of the destination bucket.
-
This parameter is required only when migrating data over an Express Connect or VPN connection, or when migrating data from a self-managed storage system.
-
You must associate an agent if the destination is a local file system or if the migration uses a dedicated connection, for example, to a financial cloud or Apsara Stack environment.
-
This parameter is required only when migrating data over an Express Connect or VPN connection, or when migrating data from a self-managed storage system.
-
You can select a maximum of 200 agents for a specified channel.
|
Parameter |
Required |
Description |
|
Name |
Yes |
Enter a name for the destination address. The name must meet the following requirements: |
|
Type |
Yes |
Select OSS. |
|
Custom domain name |
No |
The custom domain name for accessing the bucket. |
|
Region |
Yes |
Select the region where the destination bucket is located, for example, China (Hangzhou). |
|
Role |
Yes |
|
|
Bucket |
Yes |
The name of the destination bucket. |
|
Prefix |
No |
Specify a directory (prefix) to place migrated objects in the destination bucket. The prefix cannot start with a forward slash (/) and must end with one, for example, |
|
Tunnel |
No |
Select the name of the channel to use. Important
|
|
Agent |
No |
Select the name of the agent to use. Important
|
Step 4: Create a migration task
Concurrency limit for migration tasks: Deployment regions in the Chinese mainland and China (Hong Kong) support a maximum of 10 concurrent tasks. Overseas regions support a maximum of 5 concurrent tasks. Exceeding this limit may cause scheduled tasks to fail.
-
In the left-side navigation pane, choose Data Online Migration > Migration Tasks, and then click Create Task.
-
On the Select Address page, configure the following parameters, and then click Next.
Parameter
Required
Description
Name
Yes
Enter a name for the migration task. The name must meet the following requirements:
-
The name must be 3 to 63 characters in length.
-
The name can contain lowercase letters, digits, hyphens (-), and underscores (_). The name is case-sensitive.
-
The name cannot start with a hyphen (-) or an underscore (_).
Source Address
Yes
Select an existing source address.
Destination Address
Yes
Select an existing destination address.
-
-
On the Task Configurations page, configure the following parameters.
Parameter
Required
Description
Basic settings
Migration Bandwidth
No
Select the migration bandwidth.
-
Default: The maximum available bandwidth. The actual speed depends on the file size and the number of files.
-
Specify an upper limit: Specify a maximum bandwidth limit.
Important-
The actual migration bandwidth depends on factors such as the data source, network conditions, destination throttling, and file size, and may not reach the specified upper limit.
-
Select a value based on your data source, destination, business requirements, and network bandwidth. Improper throttling can disrupt your business operations.
Files Migrated Per Second
No
Select the number of files migrated per second.
-
Default: Uses the default rate for files migrated per second.
-
Specify an upper limit: Specify a maximum number of files migrated per second.
Important-
The actual number of files migrated per second is affected by factors such as the data source, network conditions, destination throttling, and file size, and may not reach the specified upper limit.
-
Select a value based on your data source, destination, business requirements, and network bandwidth. Improper throttling can disrupt your business operations.
Overwrite Mode
Yes
Specifies how to handle files with the same name.
-
Do not overwrite: Skips the file.
-
Overwrite All: The source file overwrites the destination file.
-
Overwrite based on the last modification time:
-
If the last modified time of the source file is later than that of the destination file, the destination file is overwritten.
-
If the last modified time of the source and destination files are the same, the destination file is overwritten if their Size or Content-Type differs.
-
-
With the Overwrite based on the last modification time policy, there is a risk that an older file may overwrite a newer file because it does not strictly guarantee that newer files will be preserved.
-
If you select the Overwrite based on the last modification time policy, ensure that the source files can return metadata such as last modified time, Size, and Content-Type. Otherwise, the overwrite policy may not work as expected.
-
When you select Do not overwrite or Overwrite if last modified time is later, the service sends one request to the source and one to the destination to retrieve metadata for the overwrite check. This incurs request fees at both the source and the destination.
WarningAudit settings
Migration Report
Yes
Specifies how to push the migration report.
-
Do not push (Default): Does not push the migration report to the destination bucket.
-
Push: Pushes the migration report to the destination bucket. For path details, see Next steps.
Important-
Pushing the migration report consumes storage space at the destination.
-
Pushing the migration report may be delayed.
-
Each task execution record has a unique ID. The migration report is pushed only once. Do not delete it unless necessary.
Migration Logs
Yes
Specifies how to push the migration log.
-
Do not push (Default): Does not push the migration log.
-
Push: Pushes the migration log to Log Service (SLS). You can view the migration log in SLS.
-
Push only file error logs.: Pushes only file error logs to Log Service (SLS). You can view these logs in SLS.
When you select Push or Push only file error logs., Online Migration Service creates a project in Log Service (SLS) named aliyun-oss-import-log-<Alibaba Cloud account ID>-<current deployment region>, for example, aliyun-oss-import-log-137918634953****-cn-hangzhou.
ImportantBefore you select Push or Push only file error logs., ensure you have completed the following operations. Otherwise, the migration task may fail.
-
You have activated Log Service (SLS).
-
You have granted the required permissions on the Authorize page.
Authorize
No
This option appears only when you set Migration Logs to Push or Push only file error logs..
Click Authorize to go to the Cloud Resource Access Authorization page. The system creates the AliyunOSSImportSlsAuditRole role and grants it the necessary permissions. Click Agree to Authorization to complete the authorization.
Filters
File Name
No
A filter based on filenames.
Supports Include and Exclude rules using regular expressions based on the RE2 library (only a subset of the syntax is supported). For example:
-
.*\.jpg$ matches all files that end with .jpg.
-
^file.* matches all files at the root level that start with file by default.
If you set a prefix for the source address, such as data/to/oss/, you must use ^data/to/oss/file.* to match all files that start with file under that prefix.
-
.*/picture/.* matches any subdirectory named picture.
Important-
When you use an Include rule, all matching files are migrated. If there are multiple Include rules, any file that matches at least one rule is migrated.
For example, if you have two files, picture.jpg and picture.png, and you set an Include rule for .*\.jpg$, only picture.jpg is migrated. If you also add an Include rule for .*\.png$, both files are migrated.
-
When you use an Exclude rule, no matching files are migrated. If there are multiple Exclude rules, any file that matches at least one rule is not migrated.
For example, if you have two files, picture.jpg and picture.png, and you set an Exclude rule for .*\.jpg$, only picture.png is migrated. If you also add an Exclude rule for .*\.png$, neither file is migrated.
-
Exclude rules take precedence. If a file matches both an Exclude rule and an Include rule, the file is not migrated.
For example, for a file named file.txt, if you set an Exclude rule for .*\.txt$ and an Include rule for file.*, the file file.txt is not migrated.
File Modification Time
No
Filters files based on their last modified time.
You can specify a time range to migrate only files whose last modified time falls within that range. The rules are as follows:
-
If you specify only a start time of January 1, 2019, the task migrates only files last modified on or after that date.
-
If you specify only an end time of January 1, 2022, the task migrates only files last modified on or before that date.
-
If you specify a start time of January 1, 2019 and an end time of January 1, 2022, the task migrates only files last modified on or between these two dates.
Migration configuration
Retain last modified time
Yes
Specifies whether to retain the last modified time of the source file.
-
Retain (Default): The destination file retains the last modified time of the source file.
-
Do not retain: The last modified time is not set.
Convert Appendable Object to Normal Object/Multipart Object
No
Specifies whether to convert Appendable Objects to Normal Objects or Multipart Objects.
-
Yes: Converts source Appendable Objects to Normal Objects or Multipart Objects at the destination.
-
No: Source Appendable Objects are migrated to the destination as Appendable Objects.
Important-
This option is visible and configurable only if your account is on the allowlist.
-
This option is currently supported only for OSS-to-OSS migration tasks.
Specify destination storage class
No
Specifies whether to set the storage class for destination files.
-
Specify: Migrated files are assigned the specified storage class at the destination. The following storage classes are available:
-
Standard
-
Infrequent Access
-
Archive
-
Cold Archive
-
Deep Cold Archive
-
-
Do not specify (Default): Migrated files at the destination use the default storage class of the destination bucket.
Important-
This option is visible and configurable only if your account is on the allowlist.
-
This option is currently supported only for tasks with an OSS destination.
Task scheduling
Execution time
No
Important-
If a migration task is still running at its next scheduled execution time, that execution is postponed until the next scheduled time after the current run completes. This continues until the specified number of executions is reached.
-
Concurrency limit for migration tasks: Deployment regions in the Chinese mainland and China (Hong Kong) support a maximum of 10 concurrent tasks. Overseas regions support a maximum of 5 concurrent tasks. Exceeding this limit may cause scheduled tasks to fail.
Defines when to run the migration task.
-
Immediately: Runs the task as soon as it is created.
-
At the Specified Time: Specifies a daily time window for the task to run. By default, the task starts at the specified start time and pauses at the specified stop time.
-
Periodic Scheduling: Runs the task based on a specified frequency and number of executions.
-
Execution frequency: Supports five types of frequencies: Hourly, Daily, Weekly, Specific days of the week, and Custom. For more information, see Execution frequency reference.
-
Number of executions: Specifies how many times the task runs. If not set, the task runs once by default. For the maximum number of executions, refer to the console prompt.
-
ImportantYou can manually start and stop tasks at any time, regardless of the custom execution time settings.
-
-
Read the Online Migration Service Agreement, select I understand and confirm the compliance commitment statement and acknowledge my responsibility to verify data consistency after the migration task is complete, and then click Next.
-
Review your configuration settings. If everything is correct, click OK and wait for the migration task to run.
Execution frequency
Execution frequency | Description | Example |
Hourly | Run the task once every hour. You can use this option with the maximum number of runs. | The current time is 8:05. The frequency is set to hourly with a maximum of 3 runs. The first run starts at the next hour, 9:00.
|
Daily | Run the task once a day. You must specify an hour (0-23) for the task to start. You can use this option with the maximum number of runs. | The current time is 8:05. The task is scheduled to run daily at 10:00, with a maximum of 5 runs. The first run starts at 10:00 today.
|
Weekly | Run the task once a week. You must specify a day of the week and an hour (0-23) for the task to start. You can use this option with the maximum number of runs. | The current time is Monday, 8:05. The task is scheduled to run every Monday at 10:00, with a maximum of 10 runs. The first run starts at 10:00 today.
|
Specific days of the week | Run the task on selected days of the week. You must specify the days and an hour (0-23) for the task to start. | The current time is Wednesday, 8:05. The task is scheduled to run on Mondays, Wednesdays, and Fridays at 10:00. The first run starts at 10:00 today.
|
Custom | Use a cron expression to define a custom schedule for the task start time. | Note A cron expression consists of six space-separated fields that define the execution schedule: second, minute, hour, day of the month, month, and day of the week. The minimum interval is 1 hour. The following cron expression examples are for reference only. For more options, use a cron expression generator.
|
Step 5: Verify data
The migration service only transfers your data and does not guarantee data consistency or integrity. After the migration task completes, you must verify data consistency between the source and the destination.
After the migration task completes, you must verify the data at the destination. If you delete the source data before confirming a successful migration, you are solely responsible for any resulting data loss.