Isolating a portion of an online computing service for testing

1. An apparatus, comprising:

a processor;

a set of memory units; and

a management application operative on the processor, the management application configured to perform functions of:

routing production traffic away from a deployment unit, the deployment unit including a server for running a first endpoint protection service instance for a plurality of endpoints,

generating a second endpoint protection service instance,

establishing a different endpoint on the second endpoint protection service instance,

migrating the deployment unit to the different endpoint,

applying a change to the deployment unit to produce a modified deployment unit,

and

routing at least a portion of the production traffic to the modified deployment unit for testing.

2. The apparatus of claim 1 , further comprising a deployment component arranged to direct a discovery component to process routing data and route the production traffic away from the deployment unit.

3. The apparatus of claim 1 , further comprising a validation component arranged to initiate testing with the modified deployment unit.

4. The apparatus of claim 1 , further comprising a discovery component to route the production traffic to the different endpoint.

5. The apparatus of claim 1 , further comprising a discovery component to route the portion of the production traffic to the different endpoint and another portion of the production traffic to the production endpoint.

6. The apparatus of claim 2 , wherein the deployment component is operative to apply a change to at least one computing role of a mailbox protection service for execution on the deployment unit, and create a new mailbox protection service instance.

7. The apparatus of claim 6 , wherein the deployment component is operative to roll back the change to the at least one computing role.

8. The apparatus of claim 2 , wherein the deployment component is operative to isolate production traffic associated with a subset of a plurality of users associated with the production traffic to the modified deployment unit.

9. The apparatus of claim 2 , wherein the deployment component is operative to arrange the deployment unit to be a dedicated service instance to handle production traffic from a subset of a plurality of users associated with the production traffic.

10. A computer-implemented method, comprising:

routing production traffic away from a deployment unit comprising servers for running an endpoint protection service instance for a plurality of endpoints;

generating a second endpoint protection service instance,

establishing a different endpoint on the second endpoint protection service instance,

migrating the deployment unit to the different endpoint;

applying a change to the deployment unit to produce a modified deployment unit;

and

routing at least a portion of the production traffic to the modified deployment unit for testing.

11. The computer-implemented method of claim 10 , comprising analyzing results from testing the second endpoint protection service.

12. The computer-implemented method of claim 10 , comprising rolling back the change to the deployment unit.

13. The computer-implemented method of claim 10 , comprising modifying an inter-role configuration between the servers for the deployment unit.

14. The computer-implemented method of claim 10 , comprising executing tests of the modified deployment unit.

15. The computer-implemented method of claim 10 , comprising configuring a set of computing roles into the deployment unit, the set of computing roles comprising a complete build of the endpoint protection service instance, applying a change to the set of computing roles to produce a new build of the endpoint protection service instance, and testing the new build of the endpoint protection service instance.

16. The computer-implemented method of claim 10 , comprising isolating a portion of production traffic that is associated with the modified deployment unit.

17. At least one non-transitory computer-readable storage medium comprising instructions that, when executed, cause a system to:

process routing data to route production traffic away from a deployment unit corresponding to online mailbox protection in which the deployment unit comprises a set of computing roles for running a mailbox protection service for a plurality of mailbox users;

upgrade the mailbox protection service to produce a new mailbox protection service; and route at least a portion of the production traffic to the new mailbox protection service to initiate testing of the new mailbox protection service.

18. The non-transitory computer-readable storage medium of claim 17 , comprising instructions that when executed cause the system to:

modify the routing data to migrate the deployment unit from a production endpoint to a test endpoint.

19. The non-transitory computer-readable storage medium of claim 17 , comprising instructions that when executed cause the system to:

process resource capacity data to isolate another portion of the production traffic to the deployment unit.

20. The non-transitory computer-readable storage medium of claim 17 , comprising instructions that when executed cause the system to:

modify the routing data to route the production traffic back to the deployment unit.