|
| 1 | +--- |
| 2 | +title: Enable Zone to Zone Disaster Recovery for Azure Virtual Machines |
| 3 | +description: This article describes when and how to use Zone to Zone Disaster Recovery for Azure virtual machines. |
| 4 | +author: sideeksh |
| 5 | +manager: gaggupta |
| 6 | +ms.service: site-recovery |
| 7 | +ms.topic: article |
| 8 | +ms.date: 04/28/2020 |
| 9 | +ms.author: sideeksh |
| 10 | + |
| 11 | +--- |
| 12 | + |
| 13 | +# Enable Zone to Zone Disaster Recovery for Azure virtual machines |
| 14 | + |
| 15 | +This article describes how to replicate, failover, and failback Azure virtual machines from one Availability Zone to another within the same Azure region. |
| 16 | + |
| 17 | +>[!NOTE] |
| 18 | +> |
| 19 | +>- Site Recovery currently does not support Recovery Plans for Zone to Zone Disaster Recovery. |
| 20 | +>- Support for Zone to Zone disaster recovery is currently limited to two regions: Southeast Asia and UK South. |
| 21 | +
|
| 22 | +Site Recovery service contributes to your business continuity and disaster recovery strategy by keeping your business apps up and running, during planned and unplanned outages. It is the recommended Disaster Recovery option to keep your applications up and running if there are regional outages. |
| 23 | + |
| 24 | +Availability Zones are unique physical locations within an Azure region. Each zone has one or more datacenters. |
| 25 | + |
| 26 | +## Using Availability Zones for Disaster Recovery |
| 27 | + |
| 28 | +Typically, Availability Zones are used to deploy VMs in a High Availability configuration. They may be too close to each other to serve as a Disaster Recovery solution in case of natural disaster. |
| 29 | + |
| 30 | +However, in some scenarios, Availability Zones can be leveraged for Disaster Recovery: |
| 31 | + |
| 32 | +- Many customers who had a metro Disaster Recovery strategy while hosting applications on premise sometimes look to mimic this strategy once they migrate applications over to Azure. These customers acknowledge the fact that metro Disaster Recovery strategy may not work in case of a large-scale physical disaster and accept this risk. For such customers, Zone to Zone Disaster Recovery can be used as a Disaster Recovery option. |
| 33 | + |
| 34 | +- Many other customers have complicated networking infrastructure and do not wish to recreate it in a secondary region due to the associated cost and complexity. Zone to Zone Disaster Recovery reduces complexity as it leverages redundant networking concepts across Availability Zones making configuration much simpler. Such customers prefer simplicity and can also use Availability Zones for Disaster Recovery. |
| 35 | + |
| 36 | +- In some regions that do not have a paired region within the same legal jurisdiction (for example, Southeast Asia), Zone to Zone Disaster Recovery can serve as the de-facto Disaster Recovery solution as it helps ensure legal compliance, since your applications and data do not cross national boundaries. |
| 37 | + |
| 38 | +- Zone to Zone Disaster Recovery implies replication of data across shorter distances when compared with Azure to Azure Disaster Recovery and therefore, you may see lower latency and consequently lower RPO. |
| 39 | + |
| 40 | +While these are strong advantages, there is a possibility that Zone to Zone Disaster Recovery may fall short of resilience requirements in the event of a region-wide natural disaster. |
| 41 | + |
| 42 | +## Networking for Zone to Zone Disaster Recovery |
| 43 | + |
| 44 | +As mentioned above, Zone to Zone Disaster Recovery reduces complexity as it leverages redundant networking concepts across Availability Zones making configuration much simpler. The behavior of networking components in the Zone to Zone Disaster Recovery scenario is outlined below: |
| 45 | + |
| 46 | +- Virtual Network: You may use the same virtual network as the source network for actual failovers. Use a different virtual network to the source virtual network for test failovers. |
| 47 | + |
| 48 | +- Subnet: Failover into the same subnet is supported. |
| 49 | + |
| 50 | +- Private IP address: If you are using static IP addresses, you can use the same IPs in the target zone if you choose to configure them in such a manner. |
| 51 | + |
| 52 | +- Accelerated Networking: Similar to Azure to Azure Disaster Recovery, you may enable Accelerated Networking if the VM SKU supports it. |
| 53 | + |
| 54 | +- Public IP address: You can attach a previously created standard public IP address in the same region to the target VM. Basic public IP addresses do not support Availability Zone related scenarios. |
| 55 | + |
| 56 | +- Load balancer: Standard load balancer is a regional resource and therefore the target VM can be attached to the backend pool of the same load balancer. A new load balancer is not required. |
| 57 | + |
| 58 | +- Network Security Group: You may use the same network security groups as applied to the source VM. |
| 59 | + |
| 60 | +## Pre-requisites |
| 61 | + |
| 62 | +Before deploying Zone to Zone Disaster Recovery for your VMs, it is important to ensure that other features enabled on the VM are interoperable with zone to zone disaster recovery. |
| 63 | + |
| 64 | +|Feature | Support statement | |
| 65 | +|---------|---------| |
| 66 | +|Classic VMs | Not supported | |
| 67 | +|ARM VMs | Supported | |
| 68 | +|Azure Disk Encryption v1 (dual pass, with AAD) | Supported | |
| 69 | +|Azure Disk Encryption v2 (single pass, without AAD) | Supported | |
| 70 | +|Unmanaged disks | Not supported | |
| 71 | +|Managed disks | Supported | |
| 72 | +|Customer managed keys | Supported | |
| 73 | +|Proximity placement groups | Supported | |
| 74 | +|Backup interoperability | File level backup and restore are supported. Disk and VM level backup and restore and not supported. | |
| 75 | +|Hot add/remove | Disks can be added after enabling zone to zone replication. Removal of disks after enabling zone to zone replication is not supported. | |
| 76 | + |
| 77 | +## Set up Site Recovery Zone to Zone Disaster Recovery |
| 78 | + |
| 79 | +### Log in |
| 80 | + |
| 81 | +Login to the Azure portal. |
| 82 | + |
| 83 | +### Enable replication for the zonal Azure virtual machine |
| 84 | + |
| 85 | +1. On the Azure portal menu, select Virtual machines, or search for and select Virtual machines on any page. Select the VM you want to replicate. For zone to zone disaster recovery, this VM must already be in an availability zone. |
| 86 | + |
| 87 | +2. In Operations, select Disaster recovery. |
| 88 | + |
| 89 | +3. As shown below, in the Basics tab, select ‘Yes’ for ‘Disaster Recovery between Availability Zones?’ |
| 90 | + |
| 91 | +  |
| 92 | + |
| 93 | +4. If you accept all defaults, click ‘Review + Start replication’ followed by ‘Start replication’. |
| 94 | + |
| 95 | +5. If you want to make changes to the replication settings, click on ‘Next: Advanced settings’. |
| 96 | + |
| 97 | +6. Change the settings away from default wherever appropriate. For users of Azure to Azure Disaster Recovery, this page might seem familiar. More details on the options presented on this blade can be found [here](https://docs.microsoft.com/azure/site-recovery/azure-to-azure-tutorial-enable-replication) |
| 98 | + |
| 99 | +  |
| 100 | + |
| 101 | +7. Click on ‘Next: Review + Start replication’ and then ‘Start replication’. |
| 102 | + |
| 103 | +## FAQs |
| 104 | + |
| 105 | +1. How does pricing work for Zone to Zone Disaster Recovery? |
| 106 | +Pricing for Zone to Zone Disaster Recovery is identical to the pricing of Azure to Azure Disaster Recovery. You can find more details on the pricing page [here](https://azure.microsoft.com/pricing/details/site-recovery/) and [here](https://azure.microsoft.com/blog/know-exactly-how-much-it-will-cost-for-enabling-dr-to-your-azure-vm/). Note that the egress charges that you would see in zone to zone disaster recovery would be lower than region to region disaster recovery. |
| 107 | + |
| 108 | +2. What is the SLA for RTO and RPO? |
| 109 | +The RTO SLA is the same as that for Site Recovery overall. We promise RTO <= 2 hours. There is no defined SLA for RPO. |
| 110 | + |
| 111 | +3. Is capacity guaranteed in the secondary zone? |
| 112 | +The Site Recovery team and Azure capacity management team plan for sufficient infrastructure capacity. When you start a failover, the teams also help ensure VM instances that are protected by Site Recovery will deploy to the target zone. |
| 113 | + |
| 114 | +4. Which operating systems are supported? |
| 115 | +Zone to Zone Disaster Recovery supports the same operating systems as Azure to Azure Disaster Recovery. Refer to the support matrix [here](https://docs.microsoft.com/azure/site-recovery/azure-to-azure-support-matrix). |
| 116 | + |
| 117 | +## Next steps |
| 118 | + |
| 119 | +The steps that need to be followed to run a Disaster Recovery drill, fail over, re-protect, and failback are the same as the steps in Azure to Azure Disaster Recovery scenario. |
| 120 | + |
| 121 | +To perform a Disaster Recovery drill, please follow the steps outlined [here](https://docs.microsoft.com/azure/site-recovery/azure-to-azure-tutorial-dr-drill). |
| 122 | + |
| 123 | +To perform a fail over and re-protect VMs in the secondary zone, follow the steps outlined [here](https://docs.microsoft.com/azure/site-recovery/azure-to-azure-tutorial-failover-failback). |
| 124 | + |
| 125 | +To failback to the primary zone, follow the steps outlined [here](https://docs.microsoft.com/azure/site-recovery/azure-to-azure-tutorial-failback). |
0 commit comments