You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
You can also add or remove zone redundancy to your storage account. To change between locally redundant and zone-redundant storage with PowerShell, call the [Start-AzStorageAccountMigration](/powershell/module/az.storage/start-azstorageaccountmigration) command and specify the `-TargetSku` parameter:
102
102
103
103
```powershell
@@ -115,6 +115,7 @@ Get-AzStorageAccountMigration
115
115
-AccountName <String>
116
116
-ResourceGroupName <String>
117
117
```
118
+
-->
118
119
119
120
# [Azure CLI](#tab/azure-cli)
120
121
@@ -129,6 +130,7 @@ az storage account update \
129
130
--sku <sku>
130
131
```
131
132
133
+
<!--
132
134
You can also add or remove zone redundancy to your storage account. To change between locally redundant and zone-redundant storage with Azure CLI, call the [az storage account migration start](/cli/azure/storage/account/migration#az-storage-account-migration-start) command and specify the `--sku` parameter:
133
135
134
136
```azurecli-interactive
@@ -147,6 +149,7 @@ az storage account migration show \
Copy file name to clipboardExpand all lines: articles/storage/common/storage-disaster-recovery-guidance.md
+8-18Lines changed: 8 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -96,30 +96,20 @@ The following table summarizes the resulting redundancy configuration at every s
96
96
> [!IMPORTANT]
97
97
> Customer-managed planned failover is currently in PREVIEW and limited to the following regions:
98
98
>
99
-
> - Australia East
100
-
> - Central US
99
+
> - France Central
100
+
> - France South
101
+
> - India Central
102
+
> - India West
101
103
> - East Asia
102
-
> - East US 2
103
-
> - France Central
104
-
> - India Central
105
-
> - India West
106
-
> - Southeast Asia
107
-
> - Switzerland North
108
-
> - Switzerland West
109
-
> - UK South
110
-
> - West Europe
104
+
> - Southeast Asia
111
105
>
112
106
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
113
107
>
114
108
> To opt in to the preview, see [Set up preview features in Azure subscription](../../azure-resource-manager/management/preview-features.md) and specify `AllowSoftFailover` as the feature name. The provider name for this preview feature is **Microsoft.Storage**.
There are many scenarios for which planned failover is ideal. These scenarios include:
119
-
120
-
- Disaster recovery (DR) planning and testing.
121
-
- Recovery during an outage that doesn't affect your primary region's storage service endpoints, but prevents another service from providing access to your workloads.
122
-
- To proactively prepare for large-scale disasters, such as a hurricane, that may impact a region.
112
+
Planned failover can be utilized in multiple scenarios including planned disaster recovery testing, a proactive approach to large scale disasters, or to recover from non-storage related outages.
123
113
124
114
During the planned failover process, the primary and secondary regions are swapped. The original primary region is demoted and becomes the new secondary region. At the same time, the original secondary region is promoted and becomes the new primary. After the failover completes, users can proceed to access data in the new primary region and administrators can validate their disaster recovery plan. The storage account must be available in both the primary and secondary regions before a planned failover can be initiated.
125
115
@@ -167,12 +157,12 @@ Microsoft may initiate a regional failover in extreme circumstances, such as a c
167
157
168
158
> [!IMPORTANT]
169
159
> Use customer-managed failover options to develop, test, and implement your disaster recovery plans. **Do not** rely on Microsoft-managed failover, which might only be used in extreme circumstances.
170
-
> A Microsoft-managed failover would be initiated for an entire physical unit, such as a region, datacenter. It can't be initiated for individual storage accounts, subscriptions, or tenants. If you need the ability to selectively failover your individual storage accounts, use [customer-managed planned failover](#customer-managed-planned-failover-preview).
160
+
> A Microsoft-managed failover would be initiated for an entire physical unit, such as a region or a datacenter. It can't be initiated for individual storage accounts, subscriptions, or tenants. If you need the ability to selectively failover your individual storage accounts, use [customer-managed planned failover](#customer-managed-planned-failover-preview).
171
161
172
162
### Anticipate data loss and inconsistencies
173
163
174
164
> [!CAUTION]
175
-
> Customer-managed (unplanned) failover usually involves some amount data loss, and can also potentially introduce file and data inconsistencies. In your disaster recovery plan, it's important to consider the impact that an account failover would have on your data before initiating one.
165
+
> Customer-managed unplanned failover usually involves some amount of data loss, and can also potentially introduce file and data inconsistencies. In your disaster recovery plan, it's important to consider the impact that an account failover would have on your data before initiating one.
176
166
177
167
Because data is written asynchronously from the primary region to the secondary region, there's always a delay before a write to the primary region is copied to the secondary. If the primary region becomes unavailable, it's possible that the most recent writes might not yet be copied to the secondary.
Copy file name to clipboardExpand all lines: articles/storage/common/storage-failover-customer-managed-planned.md
+10-16Lines changed: 10 additions & 16 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ author: stevenmatthew
7
7
8
8
ms.service: azure-storage
9
9
ms.topic: conceptual
10
-
ms.date: 06/13/2024
10
+
ms.date: 07/23/2024
11
11
ms.author: shaas
12
12
ms.subservice: storage-common-concepts
13
13
ms.custom: references_regions
@@ -33,18 +33,12 @@ This article describes what happens during a customer-managed planned failover a
33
33
> [!IMPORTANT]
34
34
> Customer-managed planned failover is currently in PREVIEW and limited to the following regions:
35
35
>
36
-
> - Australia East
37
-
> - Central US
38
-
> - East Asia
39
-
> - East US 2
40
36
> - France Central
37
+
> - France South
41
38
> - India Central
42
39
> - India West
40
+
> - East Asia
43
41
> - Southeast Asia
44
-
> - Switzerland North
45
-
> - Switzerland West
46
-
> - UK South
47
-
> - West Europe
48
42
>
49
43
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
Geo-zone-redundant storage (GZRS) and read-access geo-zone-redundant storage (GZRS) use ZRS replication within the primary region, and LRS within the secondary. As with RA-GRS, configuring RA allows you to read data from the secondary region as long as the storage service endpoints to that region are available.
68
62
-->
69
63
70
-
During the planned failover process, the primary region's storage service endpoints become read-only while remaining updates finish replicating to the secondary region. Next, all storage service endpoint's domain name service (DNS) entries are switched. Your storage account's secondary endpoints become the new primary endpoints, and the original primary endpoints become the new secondary. Data replication within each region remains unchanged even though the primary and secondary regions are switched. Replication within the new primary is always configured to use LRS, and replication within the original primary remains the same, whether LRS or ZRS.
64
+
During the planned failover process, the primary region's storage service endpoints become read-only while remaining updates finish replicating to the secondary region. Next, all storage service endpoint's domain name service (DNS) entries are switched. Your storage account's secondary endpoints become the new primary endpoints, and the original primary endpoints become the new secondary. Data replication within each region remains unchanged even though the primary and secondary regions are switched. <!--Replication within the new primary is always configured to use LRS, and replication within the original primary remains the same, whether LRS or ZRS.-->
71
65
72
-
Azure stores your storage account's original redundancy configuration within its metadata, allowing you fail back when ready.
66
+
<!--Azure stores your storage account's original redundancy configuration within its metadata, allowing you fail back when ready.-->
73
67
74
-
After failover, your storage account's new redundancy configuration temporarily becomes GRS. The way in which data is replicated within the primary region at a given point in time determines the storage account's zone-redundancy configuration. Replication within the new primary is always configured to use LRS, so the account is temporarily nonzonal. Azure immediately begins copying data from the new primary region to the new secondary. If your storage account's original secondary region was configured for RA, access is configured for the new secondary region during failover and failback.
68
+
<!--After failover, your storage account's new redundancy configuration temporarily becomes GRS. The way in which data is replicated within the primary region at a given point in time determines the storage account's zone-redundancy configuration. Replication within the new primary is always configured to use LRS, so the account is temporarily nonzonal. Azure immediately begins copying data from the new primary region to the new secondary. If your storage account's original secondary region was configured for RA, access is configured for the new secondary region during failover and failback.-->
75
69
76
70
The planned failback process is essentially the same as the planned failover process, but with one exception. During planned failback, Azure stores the original redundancy configuration of your storage account and restores it to its original state upon failback. For example, if your storage account was originally configured as GZRS, the storage account will be GZRS after failback.
77
71
78
72
> [!NOTE]
79
-
> Unlike [customer-managed (unplanned) failover](storage-failover-customer-managed-unplanned.md), during planned failover, replication from the primary to secondary region is allowed to finish before the DNS entries for the endpoints are changed to the new secondary. Because of this, data loss is not expected during planned failover or failback as long as both the primary and secondary regions are available throughout the process.
73
+
> Unlike [customer-managed (unplanned) failover](storage-failover-customer-managed-unplanned.md), during planned failover, replication from the primary to secondary region must be complete before the DNS entries for the endpoints are changed to the new secondary. Because of this, data loss is not expected during planned failover or failback as long as both the primary and secondary regions are available throughout the process.
80
74
81
75
## How to initiate a failover
82
76
@@ -104,7 +98,7 @@ The failover typically takes about an hour.
104
98
105
99
:::image type="content" source="media/storage-failover-customer-managed-planned/failover-to-secondary-geo-redundant.png" alt-text="Diagram that shows how the customer initiates account failover to secondary endpoint." lightbox="media/storage-failover-customer-managed-planned/failover-to-secondary-geo-redundant.png":::
106
100
107
-
After the failover is complete, the original primary region becomes the new secondary (1) and the original secondary region becomes the new primary (2). The URIs for the storage service endpoints for blobs, tables, queues, and files remain the same but their DNS entries are changed to point to the new primary region (3). Users can resume writing data to the storage account in the new primary region and the data is then copied asynchronously to the new secondary (4) as shown in the following image:
101
+
After the failover is complete, the original primary region becomes the new secondary (1), and the original secondary region becomes the new primary (2). The URIs for the storage service endpoints for blobs, tables, queues, and files remain the same, but their DNS entries are changed to point to the new primary region (3). Users can resume writing data to the storage account in the new primary region, and the data is then copied asynchronously to the new secondary (4) as shown in the following image:
108
102
109
103
:::image type="content" source="media/storage-failover-customer-managed-common/post-failover-geo-redundant.png" alt-text="Diagram that shows the storage account status post-failover to secondary region." lightbox="media/storage-failover-customer-managed-common/post-failover-geo-redundant.png":::
110
104
@@ -144,7 +138,7 @@ The failover typically takes about an hour.
144
138
145
139
:::image type="content" source="media/storage-failover-customer-managed-planned/failover-to-secondary-geo-zone-redundant.png" alt-text="Diagram that shows how the customer initiates account failover to the secondary endpoint." lightbox="media/storage-failover-customer-managed-planned/failover-to-secondary-geo-zone-redundant.png":::
146
140
147
-
After the failover is complete, the original primary region becomes the new secondary (1) and the original secondary region becomes the new primary (2). The URIs for the storage service endpoints for blobs, tables, queues, and files remain the same but are pointing to the new primary region (3). Users can resume writing data to the storage account in the new primary region and the data is then copied asynchronously to the new secondary (4) as shown in the following image:
141
+
After the failover is complete, the original primary region becomes the new secondary (1) and the original secondary region becomes the new primary (2). The URIs for the storage service endpoints for blobs, tables, queues, and files remain the same, but point to the new primary region (3). Users can resume writing data to the storage account in the new primary region, and the data is then copied asynchronously to the new secondary (4), as shown in the following image:
148
142
149
143
:::image type="content" source="media/storage-failover-customer-managed-common/post-failover-geo-zone-redundant.png" alt-text="Diagram that shows the storage account status post-failover to secondary region." lightbox="media/storage-failover-customer-managed-common/post-failover-geo-zone-redundant.png":::
150
144
@@ -162,7 +156,7 @@ The failback typically takes about an hour.
162
156
163
157
:::image type="content" source="media/storage-failover-customer-managed-planned/failback-to-primary-geo-zone-redundant.png" alt-text="Diagram that shows the customer initiating account failback to the original primary region." lightbox="media/storage-failover-customer-managed-planned/failback-to-primary-geo-zone-redundant.png":::
164
158
165
-
After the failback is complete, the storage account is restored to its original redundancy configuration. Users can resume writing data to the storage account in the original primary region (1) while replication to the original secondary (2) continues as before the failover:
159
+
After the failback is complete, the storage account is restored to its original redundancy configuration. Users can resume writing data to the storage account in the original primary region (1), while replication to the original secondary (2) continues as before the failover:
166
160
167
161
:::image type="content" source="media/storage-failover-customer-managed-common/pre-failover-geo-zone-redundant.png" alt-text="Diagram that shows the redundancy configuration returns to its original state." lightbox="media/storage-failover-customer-managed-common/pre-failover-geo-zone-redundant.png":::
0 commit comments